senior cyber security analyst

ACCC

Overview Do you want to work at an agency where each day reveals new opportunities to work on some of the biggest issues facing consumers and businesses and have opportunities to pursue new and exciting pathways? Do you want to work at a place where smart and dedicated people from all walks of life collaborate to work on meaningful matters? Do you want to play a key role in administrative discipline and effectiveness of our Information Security Management System (ISMS) especially compliance with the Australian Government Information Security Manual (ISM)? Then this is the place for you! At the ACCC, we're proud of the impact we can make together. We understand the responsibilities and challenges that come with a fast moving and ever-changing environment. Our high performing culture is built on a foundation of care, support and inclusion. It's why we're driven by connection and collaboration, sharing our skills, knowledge and support with each other freely and frequently. It's why we prioritise the wellbeing of our people and empower them to work autonomously, flexibly and courageously. At the ACCC, we believe the best version of you is the one that's true to who you are - and that's the you we want working alongside us. We value flexibility, and all roles can be performed from any capital city in a state or territory or Townsville and are available on a full-time, part-time or job-share basis. Applicants from diverse backgrounds including First Nations peoples, people with disability and those from different cultural backgrounds are encouraged to apply. What you will do as the Senior Cyber Security Analyst The Senior Cyber Security Analyst will play a key role in administrative discipline and effectiveness of our Information Security Management System (ISMS) especially compliance with the Australian Government Information Security Manual (ISM). You will be responsible for security monitoring and reporting, user administration and support of security tools based on ISM standards, playing a pivotal role in the Consumer Data Right (CDR) initiative by promoting a secure, reliable, and trusted environment. As An APS6 Senior Cyber Security Analyst, You Will <ul><li>Collaboratively work with vendors, service providers, other Commonwealth cyber security teams, and external specialists to implement and operationalise security controls and improve monitoring systems. </li><li>Undertake daily operations activities including user administration of role-based access control (RBAC), extensive use of Azure security tools and dashboards, regular audits configurations to ensure compliance and appropriate assignment of privileges. </li><li>Review security incident and event logs and monitor threat intelligence feeds and contribute to ongoing threat intelligence. </li><li>Monitor, analyse, and report compliance against ISMS controls, identifying areas for improvement in data collection, assurance processes, and security procedures. </li><li>Provide timely intelligence reporting on potential security risks and ISM compliance issues. </li><li>Contribute to the development of tactical controls and contribute to strategic direction of cyber security operations. </li><li>Prepare regular reports and presentations on cyber security for management and executives. </li> </ul>About You When assessing applications, we will have regard to the APS Integrated Leadership Profile (ILS) for the APS classification. Follow the link for more information on the ILS. The APS6 role in particular requires: <ul><li>Demonstrated ability to work in a neurodiverse security team, fostering a psychologically safety and productive work environment. Commitment to confidentiality and secure handling of sensitive information. </li><li>Demonstrated experience in dealing with enquiries and managing stakeholder relations in a composed and structured manner. </li><li>Demonstrated ability to work autonomously within a team environment and independently with minimal supervision. </li><li>Strong interpersonal skills and ability to present information clearly and concisely. </li><li>Broad knowledge of contemporary cyber security eco-system and an ability to identify solution that improve assurance processes. </li><li>Solid understanding of cyber security monitoring and reporting operations particularly against standards like the Australian Government Information Security Manual (ISM). </li><li>Applied knowledge and understanding of Australian Government Information Security Manual (ISM). </li><li>Applied knowledge and experience with key cyber security technologies and solutions including Azure tools (e.g., Sentinel and Defender), SPLUNK and Airlock. </li><li>Strong background in Azure Cloud Security environments and proficiency in Microsoft. </li><li>Experience using Azure, Microsoft 365 and DevOps tools. </li> </ul>To find out more about us and the role, please read the Candidate Kit. Security clearance This role requires a minimum of Negative Vetting 1 security clearance to be obtained and maintained, whilst in the role. How To Apply You will be asked to respond to the statement of claims of no more than 800 words and submit your resume with key outcomes or what you are most proud of in each role you have held (2 pages maximum). Salary: APS6: $99,562 to $111,590 (plus 15.4% superannuation) Contact Officer: Jasmine Mosenich - Applications Close: 11:00pm (AEDT) 02 November 2025

Senior Cyber Security Analyst - APS6 (EA2025/218)

Naufar

<div>
 
 
 JOB PURPOSE:
 
 
 
 The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 
 
 
 
 
 
 Description
 
 
 <ul>
 <li>
 Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
 </li>
 <li>
 Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
 </li>
 <li>
 Develops, Contributes and maintains of the cyber security strategy.
 </li>
 <li>
 Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
 </li>
 <li>
 Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
 </li>
 <li>
 Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
 </li>
 <li>
 Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
 </li>
 <li>
 Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
 </li>
 <li>
 Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
 </li>
 <li>
 Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
 </li>
 <li>
 Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
 </li>
 <li>
 Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
 </li>
 <li>
 Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
 </li>
 <li>
 Performs post-incident report according to standard operations.
 </li>
 <li>
 Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
 </li>
 <li>
 Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
 </li>
 <li>
 Develops focused reporting and briefings for advanced cyber threats.
 </li>
 <li>
 Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
 </li>
 <li>
 Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
 </li>
 <li>
 Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
 </li>
 <li>
 Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
 </li>
 <li>
 Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
 </li>
 <li>
 Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
 </li>
 <li>
 Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
 </li>
 <li>
 Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
 </li>
 <li>
 Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
 </li>
 <li>
 Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
 </li>
 </ul>
 
 
 
 
 
 Academic Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree &ndash; IT - Mandate
 </li>
 <li>
 Master&rsquo;s degree &ndash; Cybersecurity - Desired
 </li>
 </ul>
 
 
 
 
 
 Experience Requirements:
 
 
 <ul>
 <li>
 8+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
 </li>
 <li>
 Demonstrated experience in threat detection and analysis, incident response, and reporting.
 </li>
 <li>
 Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
 </li>
 <li>
 Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
 </li>
 <li>
 Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
 </li>
 <li>
 Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
 </li>
 <li>
 Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
 </li>
 <li>
 Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
 </li>
 </ul>
</div>

Cyber Security Analyst

D A LABS

OverviewWe are seeking a Senior Cyber Capability Developer to support mission-critical cybersecurity and threat detection efforts. In this role, you will apply deep technical expertise to analyze cyber threat activity, develop capabilities, and enhance defensive operations using platforms such as Splunk and Microsoft Sentinel. You will work closely with cybersecurity teams, stakeholders, and law enforcement partners to identify vulnerabilities, evaluate risk, and strengthen cyber resilience.This position requires strong analytical skills, hands-on technical experience, and a proven ability to work in dynamic cyber environments.Key Responsibilities<ul><li>Analyze cyber threat data including network traffic, malicious binaries, memory dumps, and disk images.</li><li>Conduct static and dynamic malware analysis, reverse engineering, and functional analysis of compiled software, scripts, and firmware.</li><li>Support development and enhancement of cyber capabilities across multiple environments.</li><li>Use Splunk and Microsoft Sentinel for threat monitoring, detection engineering, alerting, and security analytics.</li><li>Monitor security environments and identify gaps, vulnerabilities, and emerging threats from an adversarial perspective.</li><li>Collaborate with cybersecurity, SOC, and software development teams to develop solutions and implement mitigation strategies.</li><li>Perform forensic analysis to support investigations and incident response activities.</li><li>Provide recommendations to improve defensive posture, threat visibility, and incident detection.</li><li>Participate in planning, implementing, upgrading, and monitoring security measures protecting networks, systems, and data.</li><li>Contribute to documentation, reporting, and communication of findings to technical and non-technical stakeholders.</li></ul>Required Qualifications<ul><li>Bachelor&rsquo;s degree (BS or BA required).</li><li>8+ years of professional experience in cybersecurity, cyber intrusion analysis, digital forensics, malware analysis, or related fields.</li><li>Hands-on experience with:</li><li>Splunk (required)</li><li>Microsoft Sentinel (required)</li><li>Experience working in a Security Operations Center (SOC) or similar operational cybersecurity role.</li><li>Experience analyzing malicious software, network traffic, and cyber threat activity.</li><li>Experience with system vulnerability assessment and risk mitigation strategies.</li><li>Ability to respond to security incidents, breaches, and active threats.</li><li>Experience collaborating in team-based software development or cyber environments.</li><li>Strong ability to direct, manage, and contribute to technical activities to ensure customer requirements are met.</li><li>Active Top Secret security clearance required.</li></ul>Preferred Qualifications<ul><li>Splunk certifications (ES, Core, Power User, etc.).</li><li>Microsoft Sentinel certification(s).</li><li>One or more GIAC certifications:</li><li>GIAC Continuous Monitoring (GMON)</li><li>GIAC Certified Incident Handler (GCIH)</li><li>GIAC Forensic Analyst (GCFA)</li><li>GIAC Intrusion Analyst (GCIA)</li><li>GIAC Network Forensic Analyst (GNFA)</li></ul>Job Type: Full-timePay: $145,000.00 - $170,000.00 per yearWork Location: In person

Sr. Cyber Capability Developer 8+yrs EXP (Top Secret Clearance REQ)

<div></div><div><div><div><div><ul><div>2 - 3 Years</div>
<div></div><div>1 Opening</div>
 <div>Hyderabad, Kochi, Trivandrum</div></ul></div><div> 
<div><div>
</div></div></div></div><div></div><div><h3 class="jobSectionHeader">Role description</h3>
<div>Role Proficiency:

Monitor cyber security s for our global customers in a 24x7x365 operations team under supervision of Team Lead / senior members of the team.

Outcomes:
<div>
<ul><li>Under supervision of senior team members ensure that cyber security s from the SIEM and multiple sources are dealt with as per SLA. Seek support of senior members of the team in case of new type incident type or higher complexity.</li></ul>
<ul><li>Respond independently to low and medium complexity incidents</li></ul>
<ul><li>Follow documented playbook to ensure consistent and repeatable response to s.</li></ul>
<ul><li>Ensure Documentation including in CDC / SIEM work log as predefined / agreed standards. Learn from review process for continuously improvement.</li></ul>
<ul><li>Communicate and escalate as per defined process. Seek advice from senior members of the team when in doubt.</li></ul>
<ul><li>Put forward topics for inclusion or upgrade in the playbook to the attention of the senior team members.</li></ul>
<ul><li>Assist the lead in the review process for junior team members.</li></ul>
<ul><li>Adhere to defined SOC processes including housekeeping tasks. Adhere to the Information Security policies as defined by the company and customer.</li></ul>
</div>
Measures of Outcomes:
<div>
<ul><li>Adhere to SLA as agreed with the customer.</li></ul>
<ul><li>Productivity (Number of s addressed)</li></ul>
<ul><li>Quality - Percent of tickets that met quality norms</li></ul>
<ul><li>Adhere to process &ndash; Nil NC during audits</li></ul>
<ul><li>Evidence of skill development including training certification etc.</li></ul>
</div>
Outputs Expected:

Cyber Security Monitoring:
<div>
<ul><li>Work in accordance with the Playbook / under supervision of the team lead to monitor s in the CDC Platform / SIEM Tool. etc. Ensure appropriate response in line with the SLA.</li></ul></div> 
 
Cyber Security Incident Management:
<div>
<ul><li>Work in accordance with the Playbook under supervision of the team lead to process s through analysis triage and resolution.</li></ul>
<ul><li>Communicate and escalate as per defined process</li></ul>
<ul><li>In accordance with the Playbook under supervision of the team lead 
complete documentation including annotation in CDC / SIEM work log to ensure audit trail as per defined standards and quality requirements.</li></ul>
<ul><li>In accordance with the Playbook under supervision of the team lead ensure that various reports are created and published to stakeholders</li></ul></div> 
 
Continuous Learning 
innovation and optimization:
<div>
<ul><li>Ensure completion of learning programs as suggested by Managers</li></ul>
<ul><li>Suggest ideas that will help innovation and optimization of processes. Help develop the ideas into proposals.</li></ul>
<ul><li>Provide suggestions for playbook upgrade</li></ul></div> 
 
Team Work:
<div>
<ul><li>Assist junior team members where possible.</li></ul>
</div>
Skill Examples:
<div>
<ul><li>User level skills in use of CDC SIEM and other relevant tools.</li></ul>
<ul><li>Ability to identify Use Cases Use Case and Process Improvement suggestions to the Team Lead for consideration</li></ul>
<ul><li>Excellent logical problem-solving ability and analytical skills for incident triage and analysis</li></ul>
<ul><li>Good oral and written communication skills.</li></ul>
<ul><li>Continually learn new technology and stay updated on cyber threats.</li></ul>
<ul><li>Ability to work in rotating shifts and also be on-call outside of shift hours on a regular and recurring basis.</li></ul>
<ul><li>Possess unimpeachable personal and professional integrity. Individuals will be required to submit to a background check.</li></ul>
</div>
Knowledge Examples:

Knowledge Examples
<div>
<ul><li>1 to 3 years experience in SOC operations with SOC of global organization.</li></ul>
<ul><li>University Degree in Cyber Security (no back papers) / Bachelor&rsquo;s in Science or Engineering with training in cyber security</li></ul>
<ul><li>Proficient in Cybersecurity Incident Management process.</li></ul>
<ul><li>Up to date in cyber security s and incidents; intermediate understanding of enterprise IT Infrastructure including Networks Firewalls OS Databases Web Applications etc.</li></ul>
<ul><li>Understanding of ISMS principles and guidelines; relevant frameworks (e.g. ISO27001)</li></ul>
<ul><li>Desirable &ndash; Training / Certification in Ethical Hacking SIEM Tool etc.</li></ul>
</div>
Additional Comments:

The primary role of a SOC Level 1 Analyst is to serve as the frontline defense, managing first triage and ranking of security cases, and initiating the threat detection and response processes for client-related security events. The Analyst is integral to the MDR, working collaboratively with other teams to ensure high quality of service, and will be given opportunities for professional growth in cybersecurity. The position entails conducting inquiry procedures as dictated by CyberProof methodology and contributing insights on the case investigation and detection quality. Principal Duties: &bull; Quickly respond to and classify all incoming security cases, ensuring that incidents are appropriately escalated to the right analyst within the predefined SLA period during the Analyst's shift. &bull; Conduct the first triage investigations into the assigned cases using a blended approach based on tools integrated into the SOAR platform and document all collected evidence and conclusions. &bull; At the shift's commencement, diligently review all new information in the SOAR, through the Teams channel, shared mailbox, and any other designated communication mediums to ensure readiness to continue or start case the investigation and address client queries. &bull; Facilitate a smooth handoff to the next team at the end of the shift, ensuring continuous and seamless security monitoring. &bull; Remain to any procedural inconsistencies or issues and proactively report these to the team leader or upper analytical layer (L2) for resolution or consultation. &bull; Should uncertainty or complex issues arise, elevate the matter promptly to a senior L1 Analyst or Shift and Technical Leads before resorting to the L2 team. &bull; Support the Lead Analysts and the L2 team in the extraction and compilation of data needed for the preparation of Weekly, Monthly, and Quarterly Business Review (QBR) documentation. Skills and qualifications: &bull; At least 1 year of experience as a security analyst &bull; Proficient in investigating s related to phishing, malware, and similar threats. &bull; Solid understanding of computer security and networking concepts &bull; Experience with SIEM or similar security tools. &bull; Knowledgeable about endpoint protection tools &bull; Skilled in analyzing network traffic, interpreting logs, and examining packet capture. &bull; Strong critical thinking and analytical abilities &bull; Excellent written and verbal communication skills &bull; Experience managing and analyzing s from security tools is a plus. &bull; Familiarity with cloud solutions is advantageous. &bull; Relevant certifications are a plus.</div>
<h3 class="jobSectionHeader">Skills</h3>
<div>SOC Analysis,MItre Analysis,Invetigation,Sentinel</div></div></div></div>
 <div><h3 class="jobSectionHeader">About UST</h3>
<div>UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div></div>

L1 SOC Analyst

FIN Hospitality

Job Profile: Cyber Security Operations Center (SOC) Analyst (Mid&ndash;Senior Level)Location: Doha, QatarAvailability: Starting January 26 Employment Type: Full-timeTarget Salary Range (total package): 25k to 30kMandatory Requirements<ul><li>Experience: Minimum 4&ndash;7 years of experience as a SOC Analyst or in a related cybersecurity role (mid to senior level)</li><li>Language: Fluent in English (written and spoken)</li><li>Availability: Ready to join by January 26</li><li>License: Valid driving license</li><li>Strong hands-on attitude with systems and security tools, including configuration, troubleshooting, and optimization</li><li>In-depth understanding of security frameworks (MITRE ATT&amp;CK, NIST, ISO 27001, etc.)</li><li>Proficiency with SIEM tools such as Sentinel, Splunk, or QRadara</li></ul>Preferred Qualifications (Plus Points)<ul><li>Arabic speaker</li><li>Experience in the Oil &amp; Gas sector, particularly in industrial control systems (ICS) or OT security</li><li>Relevant certifications such as GCIA, GCIH, CEH, CompTIA Security+, or CISSP</li></ul>Key Responsibilities<ul><li>Monitor, analyze, and respond to security alerts from various systems and tools (SIEM, IDS/IPS, firewalls, endpoint protection, etc.)</li><li>Investigate and triage security incidents, identifying root causes and implementing corrective actions</li><li>Conduct threat hunting and vulnerability assessments to identify potential risks</li><li>Develop and maintain incident response procedures and playbooks</li><li>Collaborate with IT and network teams to improve security posture and incident response readiness</li></ul>Job Types: Full-time, PermanentPay: QAR25,000.00 - QAR30,000.00 per month

SOC (cyber security operation center) analyst (Mid–Senior Level)

Protera

<div>Job Title: Senior SOC Analyst
Shift Timing- Rotational
Work mode- Remote, India
Role Overview: 
Join a highly skilled and motivated team of Cyber Security Professionals tasked with protecting Protera Technologies and its customers. The Senior SOC Analyst role is focused on leading incident response efforts, threat hunting, digital forensics, and proactive security monitoring while providing mentorship and guidance to junior analysts. Leverage a next-generation SIEM, cyber case management, and supplementary tools to investigate, contain, and remediate cyber security incidents.
The ideal candidate is driven to learn and grow as the industry evolves and Protera Technologies adapts rapidly. While candidates may not possess every skill in the security analyst spectrum, a desire to learn, adaptability, and expertise in related disciplines are highly valued. Structured training and hands-on experience will support your growth in this complex, fast-paced service provider environment.
Responsibilities:<ul><li>Lead and coordinate Incident Response investigations for Protera Technologies and its customers</li><li>Perform detailed analysis of logs and alerts to differentiate true security incidents from benign events</li><li>Discover and correlate relationships between seemingly unrelated information to identify threats</li><li>Conduct packet analysis of network traffic to obtain corroborating evidence for investigations</li><li>Lead incident response calls with internal teams and clients, ensuring clear communication, updates, and coordinated remediation actions</li><li>Provide guidance and mentorship to junior analysts on best practices, investigations, and tool usage</li><li>Coordinate with internal teams and clients to provide effective incident handling, containment, and remediation support</li><li>Continuously improve incident response and security operations procedures</li><li>Handle escalated security incidents tools like, SIEM, EDR, ITSM, email, phone, or in-person interactions</li><li>Manage security incidents through resolution and escalate or consult with leadership when required</li><li>Tune, troubleshoot, and optimize SIEM, EDR, NDR, and other security monitoring systems</li><li>Conduct proactive threat hunting and vulnerability assessments to identify emerging risks</li><li>Serve as the primary point of contact for clients during critical security incidents, providing status updates, guidance, and recommendations</li><li>Document all incident response actions and client communications to ensure audit readiness and post-incident reporting</li></ul>
Requirements
Qualifications:<ul><li>Extensive experience reviewing and analysing log data from various network and security devices</li><li>Proficient with well-known information security tools for packet capture, network/OS fingerprinting, and communications analysis</li><li>Strong familiarity with Windows and Linux operating systems, including command-line operations</li><li>Solid foundation in networking fundamentals, including deep knowledge of TCP/IP and other core protocols</li><li>Knowledge of common network-based services and client/server applications</li><li>Excellent verbal and written communication, interpersonal, and organizational skills</li><li>Proven ability to interact with clients professionally during high-pressure situations</li><li>Strong problem-solving skills for diagnosing technical issues and mitigating incidents</li><li>Ability to manage customer interactions professionally to ensure high satisfaction</li><li>Capacity to learn new technologies and concepts quickly</li><li>Willingness to work in shift rotations or on-call schedules as needed</li></ul>
Preferred skills:<ul><li>Experience in mission-critical SOC or operations teams</li><li>In-depth understanding of exploits, vulnerabilities, network intrusions, adversary tactics, and exfiltration techniques</li><li>Hands-on experience with Malware Analysis, Phishing Email Analysis, Log Analysis, and Digital Forensics</li><li>Experience with FTK, Redline, EDR tools, and enterprise SIEM platforms</li><li>Familiarity with ITSM, IT GRC, and Cyber Case Management tools</li><li>Scripting knowledge (Python, Perl, Bash, PowerShell) to automate tasks and enhance SOC capabilities</li><li>Previous experience mentoring junior analysts or leading SOC initiatives</li><li>Strong client-facing skills and ability to lead incident calls with technical and non-technical stakeholders</li></ul>
Benefits<h3 class="jobSectionHeader">
About Company</h3>
Protera Technologies (www.protera.com) is an SAP Certified, Global Total IT Outsourcing Provider for SAP-centric organizations founded in the mid-1990s. We have been the SAP-on-cloud pioneer since running the world&rsquo;s first SAP production instance on a public cloud. Today, we manage thousands of SAP and related IT workloads on Microsoft Azure, Google Cloud, and Amazon Web Services (AWS). 
 
Headquartered in Chicago, IL, with offices in Athens, Greece, and Mumbai, India, Protera delivers world-class Managed Cloud and Security Services, providing proactive monitoring, incident response, and threat management to global enterprise clients.</div>

Senior SOC Analyst

SSquad Global

Hiring: L2 SOC Analyst (SecOps Platform Experience)Company: Ssquad Global Location: Bangalore, ITPL Whitefield Experience: 3&ndash;6 years Job Type: Full-time / Onsite Immediate Joiners PreferredWe are looking for an experienced L2 SOC Analyst with strong hands-on expertise across SecOps platforms. The role includes incident investigation, threat hunting, handling escalated alerts, and supporting response activities.Key ResponsibilitiesSecurity Monitoring &amp; Investigation<ul><li>Monitor, analyze, and triage alerts escalated from L1 analysts.</li><li>Perform in-depth investigation of security incidents using SIEM, SOAR, UEBA, EDR, NDR, and Threat Intel platforms.</li><li>Validate security events and determine true positives / false positives.</li><li>Conduct root-cause analysis and map events to MITRE ATT&amp;CK, cyber kill chain, and relevant frameworks.</li></ul>Incident Response<ul><li>Lead containment, eradication, and recovery activities for moderate to high-severity incidents.</li><li>Develop incident timelines, impact assessments, and case documentation.</li><li>Coordinate with IT, network, cloud, and application teams to execute response actions.</li><li>Support incident escalation to L3 or IR teams when required.</li></ul>Threat Hunting &amp; Proactive Security<ul><li>Perform proactive threat hunting based on hypotheses, threat intel, behavioral anomalies, or IOCs.</li><li>Analyse patterns of suspicious activity and recommend detection rule improvements.</li><li>Create custom detection content (SIEM rules, correlation logic, dashboards, playbooks).</li></ul>SecOps Platform OperationsHands-on experience with at least one or more of the following:<ul><li>SIEM: Securonix, Microsoft Sentinel, FortiSIEM,</li><li>SOAR: Palo Alto Cortex XSOAR, Splunk SOAR, Sentinel Automation.</li><li>EDR/XDR: CrowdStrike, Microsoft Defender, Trend Micro Vision One, SentinelOne.Cyber Ark, Tenable, Zscaler</li><li>NDR: Darktrace, Vectra, ExtraHop.</li></ul>Responsibilities include:<ul><li>Tuning rules, correlation policies, and detection logic.</li><li>Maintaining dashboards, threat feeds, enrichment integrations, and log ingestion pipelines.</li><li>Supporting use-case lifecycle: design &rarr; deploy &rarr; tune &rarr; optimize.</li><li>Troubleshooting platform issues and coordinating with vendors as needed.</li></ul>Reporting &amp; Documentation<ul><li>Prepare daily/weekly incident summaries, threat reports, and SOC metrics.</li><li>Document workflows, runbooks, and playbooks for repeated investigations.</li><li>Maintain compliance with audit, regulatory, and internal requirements.</li></ul>Required Skills &amp; Experience<ul><li>3&ndash;6 years of experience in SOC operations, cyber defense, incident response, or threat analysis.</li><li>Strong hands-on experience with at least one SecOps platform (Securonix/Splunk/Sentinel/QRadar/Exabeam).</li><li>Proficiency in analyzing logs from network, server, cloud, security appliances, and applications.</li><li>Experience writing correlation queries (e.g., SPL, KQL, SQL-like languages).</li><li>Knowledge of malware behavior, phishing analysis, lateral movement, privilege escalation, and network attack vectors.</li><li>Familiarity with:</li><li>MITRE ATT&amp;CK</li><li>Cyber Kill Chain</li><li>NIST 800-61 IR Framework</li><li>ISO 27001 controls</li><li>Strong understanding of network protocols (HTTP, DNS, SMTP, VPN, IPSec, TLS).</li><li>Experience with cloud environments (Azure, AWS, GCP) is an advantage</li></ul>CEH, Security+, CySA+, GCIA, GCIH, Securonix Analyst, Splunk Core/ES, SC-200, QRadar, AZ-900, AWS Security.Send your profile to hemlata@ssquad.comJob Types: Full-time, PermanentPay: &#8377;627,835.20 - &#8377;1,146,777.83 per yearBenefits:<ul><li>Provident Fund</li></ul>Work Location: In person

L2 SOC Analyst (SecOps Platform Experience)

Search 10000+ Senior cyber security analyst jobs near you this November. New roles added regularly across leading industries. Apply today.