Investigates escalated security incidents, performs threat hunting and root-cause analysis, analyzes security logs and indicators of compromise, develops and tunes SIEM detections, reduces false positives, coordinates incident response, documents investigations, supports compliance, and mentors L1 analysts.
Job Summary
We are looking for an experienced SOC Analyst L2 to investigate escalated security incidents, perform threat hunting, conduct root-cause analysis, and develop detection use cases. The candidate should have strong hands-on experience with SIEM platforms, incident response, log analysis, and security monitoring.
Key Responsibilities
· Investigate and resolve incidents escalated by L1 analysts.
· Perform threat hunting across endpoint, network, identity, and cloud logs.
· Analyze indicators of compromise (IOCs), suspicious processes, malicious IPs, and unusual authentication activity.
· Conduct incident scoping, root-cause analysis, and impact assessment.
· Develop, tune, and test SIEM detection rules and correlation searches.
· Create new detection use cases to address emerging threats and monitoring gaps.
· Reduce false positives and improve alert quality.
· Coordinate with infrastructure, network, endpoint, and identity teams during investigations.
· Maintain incident reports, technical documentation, and response timelines.
· Support security frameworks, compliance requirements, and SOC process improvements.
· Mentor L1 analysts and improve triage and escalation procedures.
Must-Have Skills
· Strong SIEM experience, preferably Splunk or another enterprise SIEM.
· Threat hunting and advanced log analysis.
· Incident investigation, containment coordination, and response.
· Detection engineering and use-case development.
· Knowledge of endpoint, network, identity, and cloud security events.
· Incident reporting, root-cause analysis, and stakeholder communication.
Preferred Certifications
CISSP, CompTIA Security+, or other relevant cybersecurity certifications. Confirm which credentials are mandatory versus preferred.
Similar Jobs
Information Technology
Performs advanced security monitoring, incident response, threat hunting, malware and forensic analysis, SIEM detection engineering, and cloud security investigations. The analyst escalates and coordinates major incidents, tunes detection rules, analyzes endpoint and cloud threats, supports ransomware response, and improves cyber defense capabilities. The role participates in 24/7 coverage, on-call support, and major incident management.
Top Skills:
Aws Security ServicesAzure SecurityCasbCloud Security Posture ManagementCortex XdrCrowdstrike FalconCyber Kill ChainDigital ForensicsDlpEmail SecurityIbm QradarLogrhythmMicrosoft Defender XdrMicrosoft SentinelMitre Att&CkSentineloneSplunk Enterprise SecurityWafZero Trust Security ArchitectureZscaler
Financial Services
Own product strategy, roadmaps, discovery, requirements, backlogs, releases, and delivery for voice recording, business controls, and applied AI products. Partner with global agile development teams and stakeholders to deliver secure enterprise capabilities. Track adoption, quality, customer experience, and operational outcomes while identifying generative AI opportunities and leading cross-functional programs.
Top Skills:
Agent-Based WorkflowsAPIsCloud ApplicationsDubberGenerative AiGlobal RelayMicrosoft PurviewNiceProofpointSmarshVerint
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Supports the Indian Navy’s P-8I Sustainment Program by resolving aircraft, systems, and ground-support-equipment maintenance issues. Interprets technical documentation, analyzes performance and maintenance data, troubleshoots equipment problems with U.S. reach-back teams, and provides hands-on training to Navy personnel. The role requires independent work, customer relationship management, short-notice travel, and after-hours response to emergent repair needs.
Top Skills:
Aircraft Maintenance Technical DocumentationAircraft SystemsBoeing 737 NgGround Support Equipment (Gse)P-8I Aircraft
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
