Security Operations Center L3

As a SOC Analyst L3, you will be the highest level of escalation for security incident response, responsible for monitoring, detecting, and mitigating potential security threats across telecommunications, signal processing, and electrical hardware and software systems. You will play a critical role in threat hunting, digital forensics, and designing advanced system logic for SIEM correlation. This role involves mentoring junior staff, driving security countermeasures, and ensuring a seamless, secure customer experience in a 24x7 operational environment.

Shift Timing : 4pm- 1 am

Role & responsibilities

• Incident Response & Escalation: Serve as the highest technical escalation point for critical security incidents; lead the containment, eradication, and recovery phases of complex compromises.
• Threat Hunting & Detection: Actively search internal networks for hidden threats, and design/implement complex system logic and correlation rules to detect advanced security anomalies.
• Digital Forensics: Perform deep-dive digital forensics on compromised endpoints and servers, preserving evidence according to industry best practices.
• SIEM & Log Management: Design and implement processes to acquire, parse, and correlate system/application log data using regular expressions and custom scripting.
• Threat Intelligence: Implement, maintain, and monitor threat intelligence feeds to proactively counter emerging threats relevant to infrastructure and networks.
• Security Tool Engineering: Recommend, design, implement, and maintain specialized security systems and tools utilized by the Network Security Operations team.
• Mentorship & Collaboration: Mentor and train junior-level SOC staff on threat validation and incident response; collaborate across functional boundaries to deploy security countermeasures.
• Compliance: Ensure all operational processes adhere to industry-specific local, state, and federal security regulations.

Preferred candidate profile

Education & Experience

• Bachelors degree in Computer Science, Engineering, or a related field (or equivalent work experience); a Master’s degree is preferred.
• 5+ years of core engineering work experience.
• 3+ years of hands-on Information Security Operations experience.
• 3+ years of direct Security Incident Response experience.
• 3+ years of experience working within Network Operations/Engineering environments.

Core Competencies

• Vulnerability & Exploit Expertise: Expert knowledge of network/system vulnerabilities, exploit techniques, attack detection, and intrusion response methodologies.
• Forensic Mastery: Deep understanding of forensic methodologies, chain of custody, and evidence preservation during active investigations.
• Technical Skills: Proficiency in writing regular expressions (Regex) for log parsing and leveraging Python or other scripting languages for automation.
• Leadership & Communication: Demonstrated leadership capabilities to manage complex incidents, drive consensus across teams, and deliver clear technical presentations to stakeholders.
• Problem Solving: Ability to balance competing priorities, maintain strong process orientation, and manage through rapid, complex operational changes.

Preferred Qualifications

• Certifications: Active security certifications such as CISSP, GCIH, GCFE, GCFA, GCTI, or CHFI.
• SIEM Content Creation: Proven experience in content creation, tuning tuning rules, and developing dashboards in enterprise SIEM platforms.

• Enterprise Background: Experience working in large, sophisticated enterprise-scale operations.

Working Conditions & Location

• Location: Hyderabad, India (Office Environment)
• Shift Work: Operates in a 24x7 Network Operations support model; requires availability for evening, weekend shifts, and participation in an on-call rotation.
• Travel: Minimal travel required.