SOC Analyst – SIEM​/EDR; Microsoft Security Stack

Position: SOC Analyst – SIEM / EDR (Microsoft Security Stack)
Job Title
SOC Analyst – SIEM / EDR (Microsoft Security Stack)
Level
Senior Consultant / Consultant
Location
Coimbatore
Experience
2+ years  of relevant SOC / Security Operations experience
Notice Period
Up to 30 days joiners only

Role Overview
We are looking for a  SOC Analyst (SC/C level)  with hands-on experience in  SIEM and Endpoint Security , primarily within the  Microsoft security ecosystem . The role involves real-time security monitoring, incident detection, investigation, and response across enterprise environments.

Key Responsibilities
SOC Operations & Monitoring
Perform  24x7 security monitoring  using SIEM tools, primarily  Microsoft Sentinel
Monitor, analyze, and triage security alerts from multiple sources (endpoints, network, cloud)
Identify false positives and escalate genuine security incidents as per defined SOPs
Incident Detection & Response
Investigate security incidents related to malware, phishing, ransomware, endpoint compromise, and suspicious user activity
Execute  incident response playbooks  and containment actions
Perform root cause analysis (RCA) and recommend remediation steps
Endpoint & Identity Security
Manage and monitor  Microsoft Defender for Endpoint
Analyze endpoint alerts, suspicious processes, and attack timelines
Support investigations related to  Azure AD / Entra   sign-ins, conditional access, and identity threats
Reporting & Documentation
Document incidents, investigations, and response actions
Prepare daily / weekly SOC reports and incident summaries
Support audits and compliance evidence related to SOC operations
Required Skills & Experience
Mandatory
2+ years of experience in  SOC / Security Operations
Hands-on experience with:
Microsoft Sentinel (SIEM)
Microsoft Defender for Endpoint (EDR)
Good understanding of:
Security alerts, logs, and event correlation
Common attack vectors (phishing, malware, brute force, lateral movement)
Basic understanding of Windows OS, networking, and security concepts
Willingness to work in  shift-based SOC environment
Good to Have

Experience with other SIEM / EDR tools
Exposure to MITRE ATT&CK framework
Azure security or cloud security exposure
SOC or security certifications (AZ-500, SC-200, CEH – optional)
Work Mode
Onsite / Hybrid  (as per business requirement)