SOC L2​/L3 Professional

Location: Bengaluru

We are looking for a skilled SOC (Security Operations Center) L2/L3 Professional to monitor, analyze, and respond to security incidents and threats. This role requires hands-on experience in detecting and responding to cyber threats, using security tools, and performing in-depth investigations to protect the organization's IT infrastructure.

Key Responsibilities:

Monitor security alerts and events from various sources (SIEM, firewalls, endpoint tools, etc.).
Analyze and investigate security incidents and potential threats.
Escalate and manage incidents that require L3-level expertise or advanced response.
Conduct threat hunting and in-depth forensic analysis on suspicious activities.
Work closely with other teams to contain, remediate, and recover from security incidents.
Create and update incident response documentation and playbooks.
Perform log analysis from multiple sources (servers, firewalls, endpoints).
Assist in vulnerability management and suggest improvements to reduce risk.
Stay updated on current threats, vulnerabilities, and attack techniques.

Required Skills:

Strong experience working in a SOC environment (Level 2/3).
Good knowledge of SIEM tools (e.g., Splunk, IBM QRadar, Arc Sight, etc.).
Familiarity with network security tools like firewalls, IDS/IPS, and endpoint protection platforms.
Experience in handling security incidents, malware analysis, and phishing attacks.
Understanding of MITRE ATT&CK framework, and cyber kill chain.
Knowledge of TCP/IP, DNS, HTTP, and common protocols.
Ability to write queries and scripts for automation or investigation.