Investigates escalated security incidents, performs threat hunting and root-cause analysis, analyzes security logs and indicators of compromise, develops and tunes SIEM detections, reduces false positives, coordinates incident response, documents investigations, supports compliance, and mentors L1 analysts.
Job Summary
We are looking for an experienced SOC Analyst L2 to investigate escalated security incidents, perform threat hunting, conduct root-cause analysis, and develop detection use cases. The candidate should have strong hands-on experience with SIEM platforms, incident response, log analysis, and security monitoring.
Key Responsibilities
· Investigate and resolve incidents escalated by L1 analysts.
· Perform threat hunting across endpoint, network, identity, and cloud logs.
· Analyze indicators of compromise (IOCs), suspicious processes, malicious IPs, and unusual authentication activity.
· Conduct incident scoping, root-cause analysis, and impact assessment.
· Develop, tune, and test SIEM detection rules and correlation searches.
· Create new detection use cases to address emerging threats and monitoring gaps.
· Reduce false positives and improve alert quality.
· Coordinate with infrastructure, network, endpoint, and identity teams during investigations.
· Maintain incident reports, technical documentation, and response timelines.
· Support security frameworks, compliance requirements, and SOC process improvements.
· Mentor L1 analysts and improve triage and escalation procedures.
Must-Have Skills
· Strong SIEM experience, preferably Splunk or another enterprise SIEM.
· Threat hunting and advanced log analysis.
· Incident investigation, containment coordination, and response.
· Detection engineering and use-case development.
· Knowledge of endpoint, network, identity, and cloud security events.
· Incident reporting, root-cause analysis, and stakeholder communication.
Preferred Certifications
CISSP, CompTIA Security+, or other relevant cybersecurity certifications. Confirm which credentials are mandatory versus preferred.
Similar Jobs
Information Technology
Performs advanced security monitoring, incident response, threat hunting, malware and forensic analysis, SIEM detection engineering, and cloud security investigations. The analyst escalates and coordinates major incidents, tunes detection rules, analyzes endpoint and cloud threats, supports ransomware response, and improves cyber defense capabilities. The role participates in 24/7 coverage, on-call support, and major incident management.
Top Skills:
Aws Security ServicesAzure SecurityCasbCloud Security Posture ManagementCortex XdrCrowdstrike FalconCyber Kill ChainDigital ForensicsDlpEmail SecurityIbm QradarLogrhythmMicrosoft Defender XdrMicrosoft SentinelMitre Att&CkSentineloneSplunk Enterprise SecurityWafZero Trust Security ArchitectureZscaler
Digital Media • Information Technology • News + Entertainment
Manages credit, collections, fraud, and vendor-management teams. Reviews collection strategies, develops performance metrics, analyzes team results, improves operational and financial performance, oversees collection-agency relationships, prepares forecasts and regulatory reports, trains staff, and supports policy, change-management, and process improvements. Requires independent judgment, cross-functional collaboration, and availability for variable schedules, including nights and weekends.
Digital Media • Information Technology • News + Entertainment
Oversee credit, collections, fraud, and vendor management teams. Develop performance metrics, improve collection strategies, manage agency relationships, analyze team performance, provide training, and support change management. Prepare financial forecasts and regulatory reports while refining policies and processes. The role requires independent judgment, cross-functional collaboration, employee engagement, and a flexible schedule including nights and weekends.
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
