Track Lead - Security Analysis, SIEM

HCL Technologies Limited; Lucknow; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

HCL Technologies Limited is seeking an experienced Threat Hunter to proactively identify, investigate, and mitigate advanced cyber threats that bypass traditional controls. You will lead hypothesis-driven hunting across endpoints, networks, identities, and cloud, reducing dwell time and raising detection maturity.

You will work with SOC, Incident Response, and Threat Intelligence teams to develop testing hypotheses, create detections, and translate findings into incidents or change requests.

Qualifications

• 6+ years of experience in SOC / threat detection
• Strong analytical and investigative mindset
• Client facing reporting and presentation skills

Responsibilities

• Identify, investigate, and mitigate advanced threats across endpoint, network, identity, and cloud
• Conduct hypothesis-based threat hunting using IOC-driven methods
• Develop MITRE ATT&CK–aligned hunting hypotheses and convert findings into incidents, rules, or change requests
• Collaborate with SOC, Incident Response, and Threat Intelligence teams
• Produce hunting reports and KPIs (dwell time reduction, hunts to detections)
• Be willing to work in 24x7 SOC environments

Skills

SIEM/SOAR

EDR/XDR

KQL / SPL

MITRE ATT&CK

Windows / Linux / macOS

PowerShell / Python

Cloud security (Azure/AWS)

Tools

Splunk

Microsoft Sentinel

Chronicle

Palo Alto XSIAM

XDR tools (Microsoft XDR, CrowdStrike, SentinelOne)

Job description

Responsible for proactively identifying, investigating, and mitigating advanced cyber threats that evade traditional, alert driven security controls. The role focuses on hypothesis-driven and intelligence-led threat hunting across endpoint, network, identity, and cloud environments to reduce dwell time and enhance detection maturity.

Key Responsibilities

• Conduct hypothesis-based and IOC-driven threat hunting across:
  • Endpoint (EDR/XDR)
  • SIEM / Log Management platforms
  • Network telemetry (NDR)
  • Identity logs (AD / Entra ID)
  • Cloud platforms (Azure, AWS, M365)
• Identify stealthy and advanced threats, including:
  • Living off the Land (LotL) techniques
  • Advanced Persistent Threats (APTs)
  • Lateral movement and privilege escalation
  • Insider threat indicators
• Develop and execute MITRE ATT&CK;–aligned hunting hypotheses
• Convert hunting findings into:
  • Security incidents
  • New detection rules (SIEM / EDR / XDR)
  • Change or service requests (misconfigurations, logging gaps)
• Collaborate with SOC, Incident Response, and Threat Intelligence teams
• Produce hunting reports and KPIs (dwell time reduction, hunts to detections, incidents generated)

Skill Requirements

Technical Skills

• Strong expertise in SIEM/SOAR platforms (Splunk, Microsoft Sentinel, Chronicle, Palo Alto XSIAM)
• Hands-on experience with EDR/XDR tools (Microsoft XDR, CrowdStrike, SentinelOne, Palo Alto Cortex)
• Proficiency in KQL / SPL / advanced hunting queries
• Deep understanding of MITRE ATT&CK; techniques and TTPs
• Strong OS knowledge: Windows, Linux, macOS
• Basic scripting skills (PowerShell / Python preferred)
• Cloud security exposure (Azure, AWS, M365 Defender)

Experience & Soft Skills

• 6+ years in SOC / Threat Detection,
• Strong analytical and investigative mindset
• Client facing reporting and presentation skills
• Willingness to work in 24×7 SOC environments

At HCLTech, you’ll supercharge your potential. You’ll find your career. And you’ll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.