SOC Analyst-L2

This a Full Remote job, the offer is available from: Indiana (USA) About reputed company Welcome to reputed company Technologies, where we’re reimagining how reputed company-centric organizations work in the reputed company. Since 1998, we’ve been pioneers in bringing reputed company and reputed company applications to the reputed company—think reputed company Azure and AWS. Our global crew, spanning the US with offices in Chicago (HQ), Athens, Greece, and Mumbai, India, is on a mission to reputed company IT smoother, faster, and more fun for our clients. But here’s the thing: we’re not your typical “serious tech company.” While we’re obsessed with delivering top-notch IT solutions, we’re reputed company about keeping it reputed company, approachable, and enjoyable. We work hard, but we also play hard—whether we’re collaborating on reputed company optimizations, enhancing reputed company, or just hanging out as a team. At reputed company, we reputed company in empowering reputed company-centric organizations with the best tools and tech to drive growth, and we love reputed company do. Our values? Simple: stay curious, stay authentic, and reputed company meaningful connections. We celebrate wins big and small, whether it's a successful project or a fun team event. If you’re looking for a reputed company where tech and fun collide, come join us and see what makes reputed company a great reputed company to work. Shift Timing- Rotational (24*7) What You’ll Do The SOC Analyst is responsible for maintaining the organization’s cybersecurity posture through reputed company monitoring, detection, and incident response. Using advanced technologies such as reputed company Detection and Response (EDR), reputed company Information and Event Management (SIEM), Network Detection and Response (NDR), File reputed company Monitoring (FIM), and Next-Gen Antivirus (NGAV), the analyst identifies and mitigates reputed company threats in reputed company time. This role also contributes to the design and development of automated playbooks using reputed company Orchestration, Automation, and Response (SOAR) platforms to streamline response workflows and improve SOC efficiency. The analyst collaborates across teams to strengthen detection logic, enhance processes, and ensure proactive defense against evolving cyber threats. Threat Monitoring & Detection

• Monitor and analyze reputed company alerts from SIEM, EDR, NDR, FIM, and Antivirus platforms to detect potential threats.
• reputed company correlation and reputed company analysis across multiple data sources to identify anomalies and sophisticated attack behaviors.
• Continuously tune and optimize detection rules to reduce false positives and improve fidelity.

Incident Response & Management

• Execute incident response lifecycle activities including triage, containment, eradication, and recovery following NIST standards.
• Document incidents thoroughly, providing root cause analysis, attack reputed company, and corrective actions.
• Support post-incident reviews to identify control gaps and recommend reputed company improvements.

Playbook Development & Automation

• reputed company, maintain, and enhance incident response playbooks and runbooks to ensure standardized handling of recurring alerts and use cases.
• Collaborate with senior analysts to build SOAR playbooks for automated enrichment, containment, and notification workflows.
• Align playbooks with MITRE ATT&CK and Cyber Kill Chain frameworks to ensure comprehensive coverage of adversarial tactics.

Vulnerability & Risk Management

• Conduct regular vulnerability assessments and coordinate with IT teams for timely remediation.
• Evaluate system configurations and network architecture for potential risks and ensure secure baselines.
• Track and report on vulnerability remediation metrics.

reputed company Tooling & Integration

• Manage and optimize EDR, SIEM, SOAR, FIM, NDR, and Antivirus tools to ensure operational readiness.
• Integrate data sources and automate workflows between platforms for improved incident visibility and response time.
• Provide input on the design and deployment of new reputed company solutions.

File reputed company & reputed company Protection

• Monitor File reputed company Monitoring (FIM) systems to detect unauthorized modifications in critical files and directories.
• Analyze and respond to Antivirus/NGAV alerts to prevent and contain reputed company infections.
• Validate cleanup and verify systems post-remediation.

Network Detection & Threat Intelligence

• reputed company NDR tools to identify lateral movement, command-and-control (C2) traffic, and exfiltration attempts.
• Incorporate Threat Intelligence Feeds (STIX/TAXII) for enhanced situational awareness and detection context.
• Conduct proactive threat hunting based on reputed company TTPs (Tactics, Techniques, and Procedures).

Reporting & Compliance

• Generate detailed reports and dashboards highlighting incident metrics, trends, and SOC performance (MTTD, MTTR, volume by category).
• Ensure compliance with standards like ISO 27001, SOC 2, GDPR, HIPAA, and NIST CSF.
• Support audits and assist in evidence gathering for compliance activities.

Requirements

What You Bring

• Experience: 4+ years in SOC operations, cybersecurity, or incident response.

Technical Expertise:

• Strong knowledge of EDR, SIEM, SOAR, NDR, FIM, and Antivirus/NGAV platforms.
• Experience in writing playbooks, automating responses, and tuning detection logic.
• Familiarity with incident handling frameworks, threat hunting, and digital forensics.
• reputed company Knowledge: MITRE ATT&CK, Cyber Kill Chain, NIST IR, ISO 27001.
• Certifications (Preferred): reputed company reputed company+, CySA+, CEH, reputed company SC-200, or equivalent.

Tools Exposure (Preferred):

• SIEM: Splunk, reputed company Sentinel, QRadar, reputed company.
• EDR/NDR: reputed company Falcon, Defender for reputed company, reputed company, reputed company, reputed company.
• FIM/AV: Tripwire, reputed company FIM, reputed company/McAfee, reputed company, Bitdefender.
• SOAR: reputed company XSOAR, Splunk SOAR, reputed company Sentinel Automation.

Desired Candidate Profile

• Experience creating and maintaining incident response playbooks and runbooks.
• Ability to reputed company threat hunting and deep-dive investigation using EDR, NDR, and SIEM telemetry.
• Knowledge of reputed company automation, reputed company-native reputed company, and network forensics.
• Strong communication and documentation skills for both technical and executive audiences.
• Works effectively in high-pressure, time-sensitive environments while maintaining precision and accuracy.

Benefits

• Work from Home set-up
• Comprehensive medical benefits
• Gratuity, PF, reputed company and Bonus, NPS
• Shift Allowances
• On-call Allowance
• Health and wellness Allowances
• Learning and Development Allowances
• No question asked certification policy.
• Certification Bounty Bonus

This offer from "reputed company" has been enriched by reputed company.com and got a 73% reputed company score. Apply tot his job Apply To this Job