Serves as the SOC escalation point for complex QRadar incidents. Conducts deep-dive investigations, threat hunting, log correlation, malware and phishing analysis, rule tuning, and incident response coordination. Develops AQL searches and detection use cases, integrates threat intelligence, leads root cause analysis, supports vulnerability and patch validation, mentors L1 analysts, and improves SOC processes and playbooks.
The SOC Sr Analyst L2 serves as the escalation point for complex security incidents detected within IBM QRadar. The L2 analyst conducts deep-dive investigations, performs threat hunting, tunes correlation rules, and coordinates incident response activities. This role requires strong analytical and technical expertise in QRadar SIEM operations, along with proactive detection and threat mitigation skills.
Key Responsibilities• Analyze escalated incidents and offenses from L1 analysts for deeper investigation and containment.
• Perform in-depth log correlation and timeline reconstruction using IBM QRadar.
• Develop and fine-tune QRadar correlation rules, AQL searches, and custom use cases for improved detection.
• Perform proactive threat hunting across multiple data sources using QRadar and threat intelligence feeds.
• Coordinate response actions during security incidents, ensuring containment, eradication, and recovery.
• Lead the root cause analysis (RCA) and prepare incident summary reports with actionable recommendations.
• Integrate and validate external threat intelligence feeds (STIX/TAXII) within QRadar for advanced correlation.
• Collaborate with IT, network, and endpoint teams for incident validation and resolution.
• Support vulnerability management, patch validation, and policy enforcement activities.
• Provide mentorship and technical guidance to L1 analysts.
• Participate in continuous improvement initiatives for SOC processes and playbooks.
Required Technical Skills• Advanced proficiency with IBM QRadar SIEM – rule creation, offense management, AQL queries, dashboards.
• Strong understanding of network and endpoint telemetry, including firewall, proxy, and EDR logs.
• Experience with malware analysis, phishing investigation, and digital forensics concepts.
• Knowledge of scripting languages (Python, PowerShell, or Bash) for automation of analysis tasks.
• Understanding of threat intelligence platforms and integration mechanisms (STIX/TAXII).
• Experience in incident response processes aligned with NIST or SANS frameworks.
• Ability to work independently and collaboratively in high-pressure security incidents.
• Excellent report writing, communication, and documentation skills.
Qualifications & Certifications• Bachelor’s or master’s degree in computer science, Cybersecurity, or related discipline.
• 2–5 years of experience in SOC, Incident Response, or Threat Analysis roles.
• Preferred certifications: IBM Certified Analyst – QRadar SIEM, GCIH, GCIA, CEH, CySA+, or MITRE ATT&CK Defender (MAD).
Similar Jobs
Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting
Manage multi-region AWS infrastructure and Linux servers, including configuration, migrations, upgrades, patching, monitoring, access control, troubleshooting, and root-cause analysis. Support serverless and container infrastructure, analyze logs and performance trends, audit infrastructure, mitigate threats, and resolve escalated operational issues. Mentor new team members and collaborate in a hybrid, client-facing consulting environment.
Top Skills:
Amazon AppstreamAnsibleAWSAws Systems ManagerAws WorkspacesBashCloudFormationCloudwatchFirewallsLinuxPythonRhelTcp/IpWireshark
Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting
Collaborates with internal and client teams to analyze business problems, translate requirements into technical designs, and implement technology solutions. Develops technical features using appropriate methodologies, testing practices, and technology stacks. Supports project implementation planning, interprets business requirements, and contributes to small- and medium-scale client engagements involving databases, programming, cloud platforms, and analytics.
Top Skills:
AWSGoogle Cloud PlatformAzureMicrosoft CopilotPythonRdbmsSQL
Financial Services
Supports business management initiatives through project management, business analysis, executive presentations, dashboard and wireframe creation, stakeholder coordination, and risk and control activities. The role manages workstreams, supports audit and regulatory deliverables, maintains SharePoint resources, coordinates team events, and identifies process improvements. It requires strong Microsoft Office skills, presentation design expertise, communication abilities, and practical use of LLM and AI tools with Python for analysis.
Top Skills:
Artificial Intelligence (Ai)Large Language Models (Llms)ExcelMicrosoft PowerpointMicrosoft SharepointPivot TablesPython
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
