SOC Analyst L3

Job Purpose

We are seeking an experienced L3 SOC Analyst / SOC Manager to lead advanced cybersecurity monitoring, incident response, threat detection, and SOC operations. The candidate will act as the highest escalation point for security incidents, manage complex investigations, improve SOC processes, and coordinate with internal teams, customers, OEMs, and leadership during critical security events.

Key Responsibilities

Security Monitoring & Incident Response

• Lead investigation and response for critical security incidents and cyber threats.
• Perform advanced threat hunting and forensic analysis.
• Analyze logs, network traffic, malware behavior, and endpoint telemetry.
• Handle escalated incidents from L1/L2 SOC teams.
• Coordinate containment, eradication, and recovery activities.
• Conduct root cause analysis (RCA) for security incidents.

SOC Operations Management

• Manage day-to-day SOC operations and ensure SLA adherence.
• Develop and improve SOC processes, SOPs, runbooks, and playbooks.
• Monitor SOC KPIs, MTTR, incident trends, and reporting metrics.
• Develop custom detection rules and MITRE ATT&CK mapped detection strategies.
• Perform proactive threat hunting activities.
• Monitor cloud security events across AWS, Azure, GCP, and Kubernetes/OpenShift environments.
• Support compliance requirements: ISO 27001, PCI-DSS, SOC2, HIPAA, DPDP, and CERT-In guidelines.

Leadership & Stakeholder Management

• Mentor and guide L1/L2 SOC analysts; conduct knowledge transfer and training sessions.
• Coordinate with Engineering, Infrastructure, Cloud, and Application teams.
• Present incident reports and risk assessments to leadership/customers.
• Manage customer escalations during critical incidents.

Qualification & Experience

• Education: Bachelor's degree in Computer Science, Cyber Security, IT, or related field. Master's degree preferred.
• Experience: 5+ years in SOC, incident response, or cybersecurity operations.
• Certifications (if any): CEH, CHFI, CISSP, CISM, CompTIA Security+, Splunk Certified, Certified SOC Analyst (CSA), CCSP.

Required Skills & Competencies

• Technical Skills: SIEM platforms, EDR/XDR, SOAR, IDS/IPS, WAF, DLP, Email Security; TCP/IP, DNS, VPN, Firewalls, AD, Linux & Windows security; Python, PowerShell, Bash scripting.
• Functional Skills: Threat hunting, malware analysis, forensic analysis, detection engineering, cloud security, compliance management, SOC KPI monitoring.
• Behavioral Competencies: Strong analytical, troubleshooting, leadership, and communication skills; ability to present to senior management.