Soc Analyst

Role & responsibilities

Preferred candidate pro

Job Description SOC Analyst (L2)

Role: Security Operations Center (SOC) – L2 Analyst

Experience

• 4–7 years of experience in Cyber Security Operations / SOC
• 3+ years of hands-on experience in security monitoring, incident investigation, and incident response

Key Responsibilities

• Investigate and analyze security incidents escalated by the L1 SOC team
• Perform alert triage, log analysis, event correlation, and root cause analysis
• Validate security alerts and distinguish true positives from false positives
• Investigate phishing, malware, unauthorized access, privilege escalation, and cloud security incidents
• Monitor and analyze security events across endpoints, networks, cloud, and identity platforms
• Coordinate with L3 engineers, infrastructure teams, and other stakeholders for incident remediation
• Maintain incident documentation, investigation reports, and ticket updates
• Ensure SLA adherence in a 24x7 SOC environment

Must-Have Skills

• SIEM: Splunk, QRadar, Microsoft Sentinel, LogRhythm
• EDR/XDR: CrowdStrike, Microsoft Defender, SentinelOne, Cortex XDR
• Security Monitoring: Firewall, IDS/IPS, WAF, VPN, Email Security, Endpoint Security
• Log Analysis: Windows, Linux, Active Directory, Microsoft 365, CloudTrail
• Threat Analysis: IOC validation, Threat Intelligence, MITRE ATT&CK
• Networking: TCP/IP, DNS, HTTP/HTTPS, SMTP

Good-to-Have Skills

• AWS or Azure security
• PowerShell or Python
• Knowledge of the NIST Incident Response Framework

Preferred Certifications

• Security+
• SC-200
• CEH
• CySA+
• Splunk Certified User
• IBM QRadar SIEM Foundation

Education

Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.

Work Location & Shift

• 24x7 rotational shift
• Willingness to work on weekends and holidays as required

Naukri Search Keywords

SOC, SIEM, Splunk, QRadar, Microsoft Sentinel, EDR, CrowdStrike, Incident Response, Threat Hunting, Log Analysisfile

Perks and benefits