Security Analyst L2/L3

CrowdStrike EDR & Next-Gen SIEM

SOC Analyst L2/L3

hands-on experience with CrowdStrike Falcon EDR and CrowdStrike Next-Gen SIEM

Key Responsibilities

Security Monitoring & Incident Response

• Act as the

  L2/L3 escalation point

  for complex and high-severity security incidents.
• Perform advanced triage, investigation, containment, and remediation of security incidents.
• Investigate malware, ransomware, phishing, credential compromise, suspicious authentication, privilege escalation, persistence, lateral movement, and suspected data exfiltration.
• Correlate endpoint, identity, network, cloud, email, and other security telemetry during investigations.
• Perform root-cause analysis and recommend corrective and preventive actions.
• Coordinate containment, remediation, and recovery activities with infrastructure, identity, network, cloud, and security teams.
• Maintain clear incident timelines, investigation findings, evidence, and remediation recommendations.

CrowdStrike Certification Requirement

• Relevant

  CrowdStrike certification is preferred

  at the time of joining.
• Candidates who are not CrowdStrike certified must be

  willing to obtain the applicable CrowdStrike Next-Gen SIEM certification within 3 months of joining

  .
• Candidates are expected to maintain hands-on proficiency with

  CrowdStrike Falcon EDR and CrowdStrike Next-Gen SIEM

  as part of the L2/L3 SOC role.