Qureos Mentor

SSquad Global

Hiring: L2 SOC Analyst (SecOps Platform Experience)Company: Ssquad Global Location: Bangalore, ITPL Whitefield Experience: 3&ndash;6 years Job Type: Full-time / Onsite Immediate Joiners PreferredWe are looking for an experienced L2 SOC Analyst with strong hands-on expertise across SecOps platforms. The role includes incident investigation, threat hunting, handling escalated alerts, and supporting response activities.Key ResponsibilitiesSecurity Monitoring &amp; Investigation<ul><li>Monitor, analyze, and triage alerts escalated from L1 analysts.</li><li>Perform in-depth investigation of security incidents using SIEM, SOAR, UEBA, EDR, NDR, and Threat Intel platforms.</li><li>Validate security events and determine true positives / false positives.</li><li>Conduct root-cause analysis and map events to MITRE ATT&amp;CK, cyber kill chain, and relevant frameworks.</li></ul>Incident Response<ul><li>Lead containment, eradication, and recovery activities for moderate to high-severity incidents.</li><li>Develop incident timelines, impact assessments, and case documentation.</li><li>Coordinate with IT, network, cloud, and application teams to execute response actions.</li><li>Support incident escalation to L3 or IR teams when required.</li></ul>Threat Hunting &amp; Proactive Security<ul><li>Perform proactive threat hunting based on hypotheses, threat intel, behavioral anomalies, or IOCs.</li><li>Analyse patterns of suspicious activity and recommend detection rule improvements.</li><li>Create custom detection content (SIEM rules, correlation logic, dashboards, playbooks).</li></ul>SecOps Platform OperationsHands-on experience with at least one or more of the following:<ul><li>SIEM: Securonix, Microsoft Sentinel, FortiSIEM,</li><li>SOAR: Palo Alto Cortex XSOAR, Splunk SOAR, Sentinel Automation.</li><li>EDR/XDR: CrowdStrike, Microsoft Defender, Trend Micro Vision One, SentinelOne.Cyber Ark, Tenable, Zscaler</li><li>NDR: Darktrace, Vectra, ExtraHop.</li></ul>Responsibilities include:<ul><li>Tuning rules, correlation policies, and detection logic.</li><li>Maintaining dashboards, threat feeds, enrichment integrations, and log ingestion pipelines.</li><li>Supporting use-case lifecycle: design &rarr; deploy &rarr; tune &rarr; optimize.</li><li>Troubleshooting platform issues and coordinating with vendors as needed.</li></ul>Reporting &amp; Documentation<ul><li>Prepare daily/weekly incident summaries, threat reports, and SOC metrics.</li><li>Document workflows, runbooks, and playbooks for repeated investigations.</li><li>Maintain compliance with audit, regulatory, and internal requirements.</li></ul>Required Skills &amp; Experience<ul><li>3&ndash;6 years of experience in SOC operations, cyber defense, incident response, or threat analysis.</li><li>Strong hands-on experience with at least one SecOps platform (Securonix/Splunk/Sentinel/QRadar/Exabeam).</li><li>Proficiency in analyzing logs from network, server, cloud, security appliances, and applications.</li><li>Experience writing correlation queries (e.g., SPL, KQL, SQL-like languages).</li><li>Knowledge of malware behavior, phishing analysis, lateral movement, privilege escalation, and network attack vectors.</li><li>Familiarity with:</li><li>MITRE ATT&amp;CK</li><li>Cyber Kill Chain</li><li>NIST 800-61 IR Framework</li><li>ISO 27001 controls</li><li>Strong understanding of network protocols (HTTP, DNS, SMTP, VPN, IPSec, TLS).</li><li>Experience with cloud environments (Azure, AWS, GCP) is an advantage</li></ul>CEH, Security+, CySA+, GCIA, GCIH, Securonix Analyst, Splunk Core/ES, SC-200, QRadar, AZ-900, AWS Security.Send your profile to hemlata@ssquad.comJob Types: Full-time, PermanentPay: &#8377;627,835.20 - &#8377;1,146,777.83 per yearBenefits:<ul><li>Provident Fund</li></ul>Work Location: In person

L2 SOC Analyst (SecOps Platform Experience)

Join SSquad Global and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

SSquad Global

ABOUT_COMPANY

L2 SOC Analyst (SecOps Platform Experience)