Lead L3 SOC Analyst

Department: Internet Security Operations Center (ISOC)

Position Type: Full-Time

Salary - 20 to 22 LPA

Position Overview

We are seeking an expert Level 3 (L3) Security Operations Center (SOC) Analyst and

Threat Hunter to serve as the technical authority for our enterprise SecOps ecosystem.

In this role, you will be the final escalation point for complex security incidents spanning

our internal network fabric and perimeter boundaries. Lead cyber incident investigation,

threat hunting, malware analysis, security architecture improvements, and major

incident response.

The ideal candidate possesses deep, hands-on experience correlation-mapping internal

East-West traffic captured by NDR with North-South perimeter traffic logged through

FortiAnalyzer. You will design, build, and optimize behavioral analytics models in

FortiUEBA, author multi-vector correlation rules in FortiSIEM, and build fully automated

containment playbooks via FortiSOAR that safely interact with FortiManager to

orchestrate remote firewall defenses.

Required Technical Skills & Qualifications

• Fortinet SecOps Expertise: Minimum 3+ years of direct engineering and

operational experience with FortiSIEM, FortiSOAR, and FortiAnalyzer.

• Fortinet Network Management: Deep understanding of FortiManager ADOMs

(Administrative Domains), policy object structures, and staging workflows,

alongside remote FortiGate policy administration.

• NetScout Mastery: Strong experience navigating NetScout Omnis /

InfiniStreamNG / AED consoles to analyze flow metrics, packet captures

(PCAPs), and internal boundary triggers.

• Automation & Scripting: Proficient in writing Python scripts and building REST

API payloads to create seamless integration hooks between FortiSOAR and

external appliances.

• Network Fundamentals: Expert-level knowledge of TCP/IP, packet analysis,

Wireshark, IPFIX, NetFlow, and routing protocols.

• Certifications (Highly Preferred):

o Fortinet Certified Professional / Solution Specialist in Security Operations

(FCP / FCSS in SecOps) or Network Security (FCSS in Network

Security).

o Industry standard certifications: GIAC (GCIA, GCIH, GNFA, GCDA) or

CISSP.

Experience & Education

• Education: Bachelor’s degree in Computer Science, Cyber Security, Network

Engineering, or equivalent practical enterprise experience.

• Experience: 5+ years of dedicated experience working inside an enterprise

SOC, with at least 2 years operating at a Senior L3 or Detection Engineering