SOC - Threat and Fraud Analyst

Job Description:-

We are looking for an L2 SOC Security Engineer with hands-on experience in security incident investigation, cloud security, blockchain/crypto transaction monitoring, financial fraud investigation, and digital forensics.

The candidate should be able to independently investigate security and financial alerts, perform technical analysis, support containment, and work closely with L3 teams.

Key Responsibilities:-

• Investigate and respond to escalated security and financial transaction alerts.
• Investigate GCP Security Command Centre (SCC), IAM, audit logs and cloud activity.
• Monitor and investigate Cloudflare WAF, DDoS, rate-limiting and abnormal traffic.
• Investigate blockchain transactions, wallet addresses, transaction flows and fund movements.
• Use blockchain analytics platforms to investigate suspicious transactions and potential fraud.
• Perform initial digital forensics, evidence collection and incident timeline analysis.
• Analyse IOCs and correlate information across security, cloud and financial monitoring systems.
• Develop, update, and maintain Standard Operating Procedures (SOPs) and incident response playbooks.
• Perform weekly/monthly health checks on log collectors, agent deployments, and telemetry pipelines.
• Support approved incident containment and escalate critical incidents to L3.
• Maintain clear investigation records and communicate findings to technical and business stakeholders.
• Follow defined SOC processes, escalation procedures and SLAs.

Must Have:-

• 3+ years of experience in SOC, Security Operations, Incident Response or Cybersecurity.
• Hands-on experience in blockchain/crypto transaction monitoring and investigation.
• Practical experience with Chainalysis, TRM Labs, Elliptic, or similar blockchain analytics platforms.
• Hands-on Digital Forensics / DFIR experience.
• Hands-on experience with GCP Security Logs Analysis.
• Strong experience in security alert investigation and incident response.
• Experience with SIEM, SOAR or EDR platforms.
• Ability to work independently in a 247 rotational shift environment.

Good to Have:-

• Strong understanding of TCP/IP, DNS, HTTP/HTTPS and authentication.
• Knowledge of Threat Intelligence, IOC analysis and MITRE ATT&CK.
• Strong analytical, troubleshooting and incident documentation skills.
• Experience with Blockaid, Hypernative, Google Chronicle platforms.
• AWS/Azure security experience.
• Python, Bash or PowerShell scripting.
• Experience with advanced blockchain investigations and crypto fraud analysis.
• Relevant security certifications such as CEH, Security+, or equivalent.

Ideal Candidate:-

A hands-on L2 security engineer who can investigate a security or financial alert, trace blockchain transactions, perform forensic analysis, identify risk and impact, support containment, and confidently escalate complex incidents to L3.

Keywords: BlockChain Security(BlockAid/Hypernative), Threat hunting & Intelligence,

Incident response, SOC2 L2, SIEM, Log Analysis, Digital Forensics, Cloud Security Log

Analysis, Good Analytical and problem-solving skills.