Join a leading cybersecurity team dedicated to safeguarding organizations from cyber threats and protecting critical assets. We focus on building resilient security postures through proactive prevention, rapid response, and strategic risk management. This role involves embedding cybersecurity principles into the core of business strategy to effectively manage information and technology risks. Explore more about our Cybersecurity initiatives and how we empower clients to embrace new opportunities securely.

Investigate and analyze security alerts escalated by SOC L1 using advanced SIEM, EDR, XDR, UEBA, NDR, and Email Security platforms. Conduct in-depth analysis of security events to determine scope, impact, and root cause, validating true positives and minimizing false positives through meticulous log analysis. Classify incidents based on severity and business impact, executing containment, eradication, and recovery actions according to established incident response procedures. Escalate complex incidents to L2/L3 or Incident Response teams as needed, analyzing Indicators of Compromise (IOCs) and correlating events across multiple security technologies to identify sophisticated attacks. Utilize frameworks like MITRE ATT&CK and the Cyber Kill Chain to identify malicious behavior and investigate various threats including phishing, malware, ransomware, insider threats, privilege misuse, and suspicious authentication activities.

We seek a professional with 1-3 years of experience in SOC monitoring, security operations, incident triage, or broader cybersecurity operations. Proficiency with SIEM technologies (LogRhythm, Splunk, Sentinel, Chronicle) and EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender) is essential. You should be adept at triaging, analyzing, and responding to SIEM events with clear articulation and effective communication through ticketing systems and email. Leveraging operational and tactical threat intelligence from established feeds is key. The role requires efficient utilization of log analytics and SIEM capabilities for log analysis, along with experience in optimizing threat detection products across SIEM, email security, EDR, antivirus, IDS, firewalls, and proxies. Collaboration with Level 2 & Level 3 teams for continuous service improvement is expected. Expertise in TCP/IP network traffic and event log analysis is mandatory, alongside strong perseverance in incident response actions and the ability to communicate complex technical issues clearly to diverse audiences. A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is required. Relevant certifications such as CompTIA Security+, CEH, ECSA, or OEM certifications for SIEM/security monitoring tools are highly valued. This role requires working from the office in Mumbai or Hyderabad.