Join Capgemini and contribute to a collaborative global community where you can shape your career and reimagine technological possibilities. We empower leading organizations to unlock technology's value and build a more sustainable, inclusive world.

As an SOC L2 Analyst, you will be instrumental in safeguarding our clients' digital assets. This role offers the opportunity to work with cutting-edge security tools and address complex security challenges within enterprise, cloud, and hybrid environments. Advance your career within a company that values innovation and offers clear progression paths.

Monitor and investigate security alerts from SIEM/XDR platforms like Microsoft Sentinel and Defender XDR to identify potential incidents. Analyze diverse telemetry data including endpoint, identity, cloud, email, and network logs for threat validation and hunting. Conduct in-depth investigations such as phishing analysis, malware triage, and log analysis, mapping activities to MITRE ATT&CK frameworks. Document findings meticulously, create incident reports, and prepare escalation packages for L3, CSIRT, and IT response teams. Propose improvements for detection rules, reduce false positives, and enhance playbooks to ensure seamless 24x7 SOC operations.

A minimum of 4 years of experience in Security Operations Center (SOC) environments is essential, with a focus on security monitoring, incident analysis, and response. Possess a strong understanding of Windows, Linux, Active Directory, Entra ID, endpoint telemetry, cloud logs, network fundamentals, email security, authentication, and enterprise attack methods. Demonstrated hands-on experience with SIEM and XDR platforms, ideally Microsoft Sentinel and Defender XDR, including proficiency in KQL for investigations. Proven ability to analyze various telemetry sources, conduct phishing/malware triage, and apply MITRE ATT&CK techniques. Experience in managing the incident lifecycle, from evidence collection and severity assessment to escalation and reporting, is required.