Security Analyst - L2

Role Overview

Key Responsibilities

• Perform deep-dive investigations on alerts from across SIEM, EDR/XDR, Cloud, DLP, DAM, and Email Security tools
• Correlate logs and telemetry to reconstruct attack timelines and identify root cause
• Investigate advanced threats such as lateral movement, privilege escalation, account compromise, and malware activity
• Conduct endpoint analysis (process injection, persistence mechanisms, suspicious binaries, command-line artifacts)
• Analyze cloud security incidents (Azure/AWS) including IAM misuse, impossible travel, token abuse, and misconfigurations
• Perform advanced phishing and BEC investigations, including header analysis, URL detonation, and payload inspection
• Investigate DLP (Netskope) alerts for potential data exfiltration, policy violations, and insider threats
• Analyze data movement patterns across endpoints, email, and cloud storage
• Tune and validate DLP policies to reduce false positives and improve detection accuracy