Security Operations Center L3

SOC Analyst L3

Shift Timing :

Role & responsibilities

• Incident Response & Escalation:

   Serve as the highest technical escalation point for critical security incidents; lead the containment, eradication, and recovery phases of complex compromises.

• Threat Hunting & Detection:

   Actively search internal networks for hidden threats, and design/implement complex system logic and correlation rules to detect advanced security anomalies.

• Digital Forensics:

   Perform deep-dive digital forensics on compromised endpoints and servers, preserving evidence according to industry best practices.

• SIEM & Log Management:

   Design and implement processes to acquire, parse, and correlate system/application log data using regular expressions and custom scripting.

• Threat Intelligence:

   Implement, maintain, and monitor threat intelligence feeds to proactively counter emerging threats relevant to infrastructure and networks.

• Security Tool Engineering:

   Recommend, design, implement, and maintain specialized security systems and tools utilized by the Network Security Operations team.

• Mentorship & Collaboration:

   Mentor and train junior-level SOC staff on threat validation and incident response; collaborate across functional boundaries to deploy security countermeasures.

• Compliance:

   Ensure all operational processes adhere to industry-specific local, state, and federal security regulations.

Preferred candidate profile

Education & Experience

• Bachelors degree

   in Computer Science, Engineering, or a related field (or equivalent work experience); a 

  Master’s degree

   is preferred.

• 5+ years

   of core engineering work experience.

• 3+ years

   of hands-on Information Security Operations experience.

• 3+ years

   of direct Security Incident Response experience.

• 3+ years

   of experience working within Network Operations/Engineering environments.

Core Competencies

• Vulnerability & Exploit Expertise:

   Expert knowledge of network/system vulnerabilities, exploit techniques, attack detection, and intrusion response methodologies.

• Forensic Mastery:

   Deep understanding of forensic methodologies, chain of custody, and evidence preservation during active investigations.

• Technical Skills:

   Proficiency in writing regular expressions (Regex) for log parsing and leveraging 

  Python

   or other scripting languages for automation.

• Leadership & Communication:

   Demonstrated leadership capabilities to manage complex incidents, drive consensus across teams, and deliver clear technical presentations to stakeholders.

• Problem Solving:

   Ability to balance competing priorities, maintain strong process orientation, and manage through rapid, complex operational changes.

Preferred Qualifications

• Certifications:

   Active security certifications such as 

  CISSP, GCIH, GCFE, GCFA, GCTI, or CHFI

  .

• SIEM Content Creation:

   Proven experience in content creation, tuning tuning rules, and developing dashboards in enterprise SIEM platforms.

• Enterprise Background:

   Experience working in large, sophisticated enterprise-scale operations.

Working Conditions & Location

• Location:

   Hyderabad, India (Office Environment)

• Shift Work:

   Operates in a 

  24x7 Network Operations support

   model; requires availability for evening, weekend shifts, and participation in an 

  on-call rotation

  .

• Travel:

   Minimal travel required.