Serves as the SOC escalation point for complex QRadar incidents. Conducts deep-dive investigations, threat hunting, log correlation, malware and phishing analysis, rule tuning, and incident response coordination. Develops AQL searches and detection use cases, integrates threat intelligence, leads root cause analysis, supports vulnerability and patch validation, mentors L1 analysts, and improves SOC processes and playbooks.
The SOC Sr Analyst L2 serves as the escalation point for complex security incidents detected within IBM QRadar. The L2 analyst conducts deep-dive investigations, performs threat hunting, tunes correlation rules, and coordinates incident response activities. This role requires strong analytical and technical expertise in QRadar SIEM operations, along with proactive detection and threat mitigation skills.
Key Responsibilities• Analyze escalated incidents and offenses from L1 analysts for deeper investigation and containment.
• Perform in-depth log correlation and timeline reconstruction using IBM QRadar.
• Develop and fine-tune QRadar correlation rules, AQL searches, and custom use cases for improved detection.
• Perform proactive threat hunting across multiple data sources using QRadar and threat intelligence feeds.
• Coordinate response actions during security incidents, ensuring containment, eradication, and recovery.
• Lead the root cause analysis (RCA) and prepare incident summary reports with actionable recommendations.
• Integrate and validate external threat intelligence feeds (STIX/TAXII) within QRadar for advanced correlation.
• Collaborate with IT, network, and endpoint teams for incident validation and resolution.
• Support vulnerability management, patch validation, and policy enforcement activities.
• Provide mentorship and technical guidance to L1 analysts.
• Participate in continuous improvement initiatives for SOC processes and playbooks.
Required Technical Skills• Advanced proficiency with IBM QRadar SIEM – rule creation, offense management, AQL queries, dashboards.
• Strong understanding of network and endpoint telemetry, including firewall, proxy, and EDR logs.
• Experience with malware analysis, phishing investigation, and digital forensics concepts.
• Knowledge of scripting languages (Python, PowerShell, or Bash) for automation of analysis tasks.
• Understanding of threat intelligence platforms and integration mechanisms (STIX/TAXII).
• Experience in incident response processes aligned with NIST or SANS frameworks.
• Ability to work independently and collaboratively in high-pressure security incidents.
• Excellent report writing, communication, and documentation skills.
Qualifications & Certifications• Bachelor’s or master’s degree in computer science, Cybersecurity, or related discipline.
• 2–5 years of experience in SOC, Incident Response, or Threat Analysis roles.
• Preferred certifications: IBM Certified Analyst – QRadar SIEM, GCIH, GCIA, CEH, CySA+, or MITRE ATT&CK Defender (MAD).
Similar Jobs
Software • Hospitality
Supervise food and beverage outlet operations, lead and train team members, ensure exceptional guest service, manage inventory and costs, support sales targets, address guest concerns, and maintain food safety, hygiene, and brand standards.
Software • Hospitality
Supervise daily food and beverage outlet operations, lead and train team members, ensure excellent guest service, manage inventory and costs, support sales targets, coordinate with other departments, and maintain food safety, hygiene, and compliance standards.
Software • Hospitality
Supervise executive floor and lounge operations, leading teams that deliver personalized VIP guest service. Responsibilities include scheduling, delegation, training, performance reviews, guest concern resolution, special-request coordination, cleanliness and readiness oversight, food and beverage service quality, inventory and procurement monitoring, cross-departmental coordination, operational reporting, and maintaining accurate records.
Top Skills:
Hotel Pms
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
