Sr. SOC Engineer - Incident Response

Neurealm Company; Chennai; On-site; INR 1,500,000 - 3,000,000; Full time

Job summary

Neurealm Company in Chennai, India is seeking a Sr. SOC Engineer specializing in Incident Response with 5+ years in SOC/IR roles. You will lead high-priority incident analysis, conduct malware and log forensics, and drive proactive threat hunts and post-incident reviews.

Responsibilities include coordinating containment with IT, updating IR playbooks, and mentoring L1 analysts while ensuring regulatory and policy compliance within a 100% on-site work model.

Qualifications

• 5+ years in dedicated SOC/IR roles.
• Strong malware and log analysis skills.
• Experience with incident lifecycle and RCA.
• Ability to lead and mentor L1 analysts.

Responsibilities

• Lead Tier 3 analysis of escalated L1 alerts and high-priority incidents.
• Perform log, malware, and PCAP/EDR analysis for forensics.
• Conduct proactive threat hunting to identify hidden IOCs/TTPS.
• Coordinate containment and recovery with IT teams.

Skills

Python

PowerShell

Bash

MITRE ATT&CK

NIST IR

Tools

Splunk

Sentinel

CrowdStrike

Defender

FTK

Volatility

Job description

## Sr. SOC Engineer - Incident Response25-05-2026 19:42:48Job\\_3041685 - 8 years* Chennai, Tamil Nadu, India (CHN)* Senior SOC & Incident Response Specialist (5+ Years) Core Scope* Tier 3 Response: Lead analysis of escalated L1 alerts and handle high-priority incidents.* Deep Forensics: Perform log, malware, and network traffic analysis (PCAP/EDR).* Threat Hunting: Conduct proactive hunts to identify hidden IOCs and TTPs.* Remediation: Coordinate with IT teams for containment and system recovery.* Optimization: Develop/update IR Playbooks, SOPs, and automation (SOAR) workflows.* Leadership: Mentor L1 analysts and lead Post-Incident Reviews (RCA).* Intel & Compliance: Integrate threat intel and ensure all actions meet regulatory/policy standards.* Operations: Manage shift handovers, attend daily syncs, and escalate critical risks.Technical Skills:* Tools: Advanced SIEM (Splunk/Sentinel), EDR (CrowdStrike/Defender), and Forensics (FTK/Volatility).* Analysis: Static/Dynamic malware analysis and root cause investigation.* Scripting: Automation via Python, PowerShell, or Bash.* Frameworks: Mastery of NIST IR lifecycle and MITRE ATT&CK.Acceptance Criteria:* Work Mode: 100% Work from Office (WFO).* Schedule: Rotational shifts and rotational weekly offs.* SLA: Strict adherence to response and resolution timelines.* Experience: Minimum 5+ years in dedicated SOC/IR roles.Apply Now