Monitors, investigates, and remediates security alerts and complex incidents in a 24x7 SOC. Conducts threat hunting, analyzes SIEM, EDR, network, and application data, develops detection techniques, performs root cause analysis, and prepares SOC documentation and reports. Mentors junior analysts, maintains security tool health, collaborates across security teams, and provides technical leadership during critical incidents.
About Techdefence:
Techdefence is a leading cybersecurity solutions provider specializing in offensive and defensive security, AI-powered threat intelligence, and enterprise security frameworks. Our comprehensive services and product portfolio cater to global enterprises, government agencies, and critical infrastructure, ensuring proactive protection against cyber threats.
With a strong R&D focus, Techdefence delivers cutting-edge security solutions in the areas of cloud security, network security, application security, penetration testing, SOC solutions, and managed security services. Our expertise in cyber resilience, risk management, and compliance frameworks (ISO 27001, NIST, GDPR, PCI-DSS, etc.) positions us as a trusted partner for organizations worldwide.
Role Overview:
We are seeking a skilled Cyber Security Analyst Level 2 to enhance our security monitoring, incident response, brand protection, and threat intelligence capabilities under 24x7 SOC operations. The Level 2 Security Analyst will play a critical role in identifying and mitigating potential threats through advanced monitoring, data analysis, and collaboration with various stakeholders. This role involves leading complex investigations, mentoring junior analysts, and developing advanced threat detection techniques.
Key Responsibilities:
- Lead the monitoring, triaging, investigation, and remediation of security alerts within defined SLAs, while providing guidance and support to L1 SOC analysts.
- Manage and respond to complex and high-severity security incidents, coordinating with relevant internal teams and stakeholders to ensure timely resolution and effective containment.
- Develop and implement advanced detection and analytical techniques to identify sophisticated threat actors, emerging attack patterns, and evolving tactics, techniques, and procedures (TTPs).
- Conduct proactive threat hunting activities to identify hidden threats, suspicious behavior, and potential indicators of compromise across the enterprise environment.
- Analyze and correlate large volumes of security data from SIEM, EDR, network, and other security solutions to identify novel threats and attack techniques.
- Collaborate with the Cyber Defense Center and other security teams to develop and continuously improve threat-hunting strategies, detection rules, and security analytics.
- Perform detailed root cause analysis of security incidents and communicate findings, impact, and recommendations to both technical teams and leadership.
- Develop and maintain Standard Operating Procedures (SOPs), incident documentation, knowledge articles, and comprehensive end-of-shift reports.
- Prepare, review, and validate daily, weekly, and monthly SOC reports, ensuring accuracy, completeness, and timely submission.
- Oversee daily health checks of security tools and components to ensure optimal availability and performance.
- Mentor and train junior analysts, promoting knowledge sharing and continuous improvement within the SOC team.
- Work effectively in a 24x7 SOC environment, including rotational and night shifts, and provide leadership and technical support during critical security incidents.
Qualifications:
Education:
- Bachelor's degree in information technology, Computer Science/Engineering, or equivalent.
- Desirable certifications: Security+, CEH, GCIH, GCIA, GSEC, CISSP, CISM.
Experience:
- Minimum 3+ years in SOC monitoring and incident management.
- Extensive experience in Security Operations, Incident Response, Detection Engineering, Offensive
- Security/Red Team, or Cyber Threat Intelligence.
- Proficiency with SIEM processes and products (e.g., Microsoft Sentinel SIEM, EDR, CSPM).
- Experience analyzing systems, network, and application logs for advanced attack techniques.
- Experience consuming and analyzing Cyber Threat Intelligence for actionable insights.
Technical Skills:
- Advanced deep packet and log analytics.
- Proficiency in forensic and malware analysis.
- Expertise in cyber threat and intelligence gathering and analysis.
Analytical Skills: Ability to analyze large and complex data sets to identify sophisticated threats.
Communication Skills: Effectively communicate complex findings to technical staff and leadership.
Collaboration Skills: Work effectively across a complex, geographically dispersed organization, leading cross-functional teams.
Problem-Solving Skills: Develop innovative threat detection methods and remediation plans, addressing complex security challenges.
Leadership Skills: Provide mentorship and guidance to junior analysts, fostering a collaborative and high performing team environment.
Similar Jobs
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Design architecture and scalable web applications for ServiceNow’s Agentic Playbooks platform. Build interactive user interfaces, reusable tools and frameworks, and platform features using modern frontend and object-oriented engineering practices. Collaborate across teams, solve complex technical problems, drive initiatives from design through delivery, mentor engineers, and apply AI-assisted development while maintaining quality, security, and maintainability.
Top Skills:
Ai AgentsAngularJavaJavaScriptMcpReactServicenow Flow EngineTypescriptVue
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Staff Software Engineer responsible for designing and delivering AI-powered IT asset management and AI cost management capabilities. The role spans full-stack development, analytical data stores, distributed data pipelines, dashboards, testing, performance optimization, and production readiness. Responsibilities include owning the software lifecycle, collaborating with product managers, architects, and quality engineers, integrating AI workflows, improving product quality, and mentoring peers.
Top Skills:
Amazon RedshiftAngularApache AirflowApache DruidApache FlinkApache KafkaSparkBigQueryCi/CdClickhouseDbtJavaJunitLookerPlaywrightPower BIPythonReactSnowflakeTableauTestngUnixVerticaVue
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Leads platform engineering across DevOps, deployment, performance, and developer productivity. Owns CI/CD enablement, internal AI platforms, observability, Kubernetes operations, performance tooling, and release quality. Architects scalable platform capabilities, applies agentic AI to engineering workflows, drives cross-functional governance, mentors engineers, and establishes technical standards. Requires extensive software engineering experience, deep DevOps and Kubernetes expertise, distributed-systems knowledge, observability skills, and experience building internal developer platforms.
Top Skills:
A2AAgentic AiAi/MlCi/CdDistributed SystemsDockerGithub ActionsGrafanaJavaJenkinsKubernetesMcpOpentelemetryPrometheusPythonServicenow
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
