Senior Associate L2- SOC Analyst

We are seeking a skilled and detail-oriented SOC Analyst to join our Security Operations Center (SOC) team. The ideal candidate should have hands-on experience in EDR monitoring, SIEM analysis, Microsoft 365 security alert investigation, and incident response activities. Experience in phishing investigations, CASB, and DLP alert analysis will be an added advantage.

The role involves monitoring, investigating, correlating, and responding to security alerts across multiple security platforms to ensure the protection of organizational assets, endpoints, cloud environments, and sensitive data.

Monitor and analyze security alerts from EDR platforms, SIEM solutions, and NGSIEM tools.

Perform in-depth analysis and correlation of alerts across multiple security technologies.

Monitor, analyze, and investigate security alerts generated from:

EDR Platforms

SIEM / NGSIEM Solutions

Microsoft 365 Security Portal

Email Security Platforms

CASB Solutions

DLP Technologies

Escalate critical incidents and provide detailed investigation findings along with actionable remediation recommendations.

Demonstrate deep technical expertise, analytical thinking, and the ability to lead security investigations.

Analyze malware, threat vectors, attacker tactics, techniques, and procedures (TTPs).

Conduct proactive threat hunting across endpoints using behavioral analytics and threat intelligence.

Develop and execute custom detection rules, queries, and correlation logic.

Perform log analysis, forensic investigations, and endpoint telemetry analysis.

Collaborate with cross-functional teams to contain, eradicate, and recover from security incidents.

Work with multiple technology platforms and interface with:

Enterprise Infrastructure Services

IT Architecture Teams

Enterprise Application Services

Business and Technology Functions

Stay current with emerging threats, adversarial techniques, and evolving attack methodologies.

Quickly understand and analyze complex enterprise environments.

Translate highly technical requirements into clear, user-friendly, and comprehensive Standard Operating Procedures (SOPs).

Support investigations related to:

CASB Alerts

DLP Alerts

Microsoft Defender Security Alerts

Phishing Emails and Email Threats

Assist in securing cloud and hybrid environments across AWS, Azure, and GCP.

5+ years of overall experience in the Cybersecurity domain.

4+ years of hands-on experience as a SOC Analyst.

Experience with Python and PowerShell scripting for security automation is preferred.

Experience in:

Phishing Analysis

Threat Analysis

CASB Investigations

DLP Investigations

Strong analytical and problem-solving skills.

Excellent communication and documentation abilities.

Ability to lead investigations and work under pressure.

Strong collaboration and stakeholder management skills.

Full-time Bachelor’s or Master’s Degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field.

CEH (Certified Ethical Hacker)

CompTIA Security+

CHFI (Computer Hacking Forensic Investigator)

CCFR (Certified Cybercrime First Responder)

CCFA (Certified Cyber Forensics Analyst)

CCFH (Certified Cyber Forensics & Hacking)

Total Experience: 7+ Years in Cybersecurity Relevant SOC Experience: 5+ Years