L-III, L-II, L-I SOC Analyst- 05 Post - Kerala Govt. SOC Project

For L3 Analyst

• Monitor, manage, and maintain SOC security tools, SIEM platforms, and other security monitoring technologies to ensure effective detection and response.
• Coordinate and oversee security incident monitoring, triage, investigation, analysis, containment, eradication, and recovery activities.
• Analyze security alerts, incidents, and risks to identify potential threats, determine impact, and prioritize appropriate response actions.
• Lead incident response activities, including root-cause analysis, threat investigation, problem resolution, and implementation of corrective and preventive measures.
• Coordinate incident communication and escalation with relevant stakeholders, ensuring timely and accurate reporting of security events.
• Proactively identify security risks, vulnerabilities, and emerging threats and recommend appropriate mitigation measures.
• Ensure effective operation, optimization, and continuous improvement of SIEM, UEBA, EDR, SOAR, NDR, vulnerability management, and other security technologies.
• Develop and maintain incident response procedures, playbooks, use cases, dashboards, and security monitoring processes.
• Coordinate with IT, infrastructure, network, application, and other teams to support timely incident containment and resolution.
• Demonstrate proficiency in advanced cybersecurity tools, technologies, threat detection techniques, and security operations best practices.
• For SOC L3 responsibilities, provide operational leadership, assign and prioritize SOC activities, mentor analysts, monitor team performance, and drive continuous improvement of SOC processes and capabilities.

For L2 Analyst

• Monitor, manage, and maintain SOC security tools, SIEM platforms, and other security monitoring technologies to ensure effective detection and response.
• Analyze security logs, network traffic, and SIEM alerts to identify, investigate, and validate potential security incidents.
• Perform malware analysis and basic reverse engineering to understand malicious behavior, indicators of compromise (IOCs), and attack vectors.
• Develop and use scripts and automation with tools such as Python and PowerShell to improve threat detection, investigation, and SOC processes.
• Apply strong analytical and problem-solving skills to conduct incident investigations, correlate security events, determine root causes, and support effective remediation.
• Communicate security findings clearly and maintain accurate incident documentation, investigation reports, and knowledge-base records for effective collaboration and knowledge sharing.

For L1 Analyst

• Monitor security alerts and events using SIEM and other security monitoring tools to identify potential threats and incidents.
• Apply fundamental networking and cybersecurity concepts to analyze and understand security events and suspicious activities.
• Identify and assess common cyber threats, attack vectors, and indicators of compromise (IOCs).
• Investigate, validate, and prioritize security alerts, escalating confirmed or suspicious incidents according to established procedures.
• Maintain accurate incident documentation and communicate findings clearly to relevant teams and senior SOC analysts.
• Follow established security procedures, incident response protocols, and operational best practices to support effective threat detection and response.