Posted:2 days ago| Platform: Linkedin logo

Apply

Skills Required

siem management analysis security triage coordination dashboard optimization documentation splunk certifications security+ power monitoring network correlation azure gcp phishing support engineering onboarding automation netskope nessus osint compliance evidence audit reports checks logic tcp ip http vpn authentication nist technology

Work Mode

On-site

Job Type

Full Time

Job Description

Skills:

SIEM, edr, Threat & Vulnerability Management, Log Analysis, Incident Management, Email Security, xdr, crowdstrike,

JOB TITLE:

L2 Security Operations Center (SOC) Analyst

Job Purpose

To act as a senior-level analyst in the 24x7 Security Operations Center (SOC), responsible for advanced security event triage, log analysis, threat investigation, and response coordination using modern security platforms such as SIEM, SOAR, EDR, and Threat Intelligence systems. The L2 SOC Engineer will also contribute to dashboard optimization, incident documentation, playbook updates, and assist in the administration of key tools such as Splunk and CrowdStrike.

Qualification

Graduation

Certifications

  • CompTIA CySA+ / Security+ / CEH
  • Splunk Core Certified User / Power User
  • Microsoft AZ-500 / SC-200
  • CrowdStrike Certified Falcon Responder (CFR)
Any of the above.

Location:

Navi Mumbai

Responsibilities (includes All Tasks)

Security Monitoring & Incident Handling

  • Triage and investigate escalated alerts from SIEM, XDR (CrowdStrike), EDR, email, and network security tools.
  • Perform log correlation and in-depth investigations using Splunk/Elastic dashboards and queries.
  • Handle incidents across endpoints, cloud (Azure/OCI/GCP), email, DLP, and network layers.
  • Respond to phishing, malware, unauthorized access, and insider threat alerts.
  • Support forensic triage using EDR tools and sandbox results (e.g., Falcon Sandbox).

SOC Engineering & SIEM Operations

  • Create, fine-tune, and optimize detection rules and dashboards in Splunk.
  • Maintain and troubleshoot Splunk forwarders, heavy forwarders, and dashboards under guidance.
  • Participate in log onboarding and validation for new sources (e.g., CSPM, EDR, DLP, Cloud tools).
  • Support automation workflows and enrichment via playbooks.

Tool Proficiency & Admin Support

  • Hands-on knowledge of:
  • SIEM: Splunk, Elastic (optional)
  • EDR/XDR: CrowdStrike
  • Email Security: Mimecast
  • DLP: Forcepoint (Web/Email), Netskope (CASB/ZTNA)
  • Vulnerability Management: Nessus, Qualys
  • Threat Intel Tools: IOC lookups, sandboxing tools, OSINT

Documentation & Compliance

  • Maintain updated incident records, timelines, and evidence in ITSM or ticketing platforms.
  • Contribute to SOP/Playbook updates, audit reports, and RCA documentation.
  • Participate in compliance checks for ISO 27001 and internal audits.

Continuous Improvement

  • Suggest detection logic improvements based on new threats or recurring false positives.
  • Engage in purple teaming and threat hunting exercises as needed.

Technical Skills /Competencies

MANDATORY

  • 3-6 years of relevant experience in a SOC environment.
  • Strong hands-on knowledge of SIEM (Splunk) and EDR (CrowdStrike).
  • Experience in log analysis, threat detection, and incident handling.
  • Good understanding of TCP/IP, DNS, HTTP, VPN, authentication, cloud security basics.
  • Familiarity with ISO 27001, or NIST 800-61 IR process is a plus.
  • Certifications such as CompTIA CySA+, CEH, Splunk Core/User, or AZ-500 preferred.

OPTIONAL

Soft Skills

MANDATORY

  • Bachelors degree in computer science, Information Technology, or related field.
  • At least 6 years of experience in support operations
  • Strong analytical mindset and attention to detail.
  • Ability to prioritize under pressure and respond within SLA timelines.
  • Proactive, accountable, and a team player.
  • Willingness to work in shifts (24x7 SOC coverage) if required.

More Jobs at Intertec Systems

AWS Cloud Engineer

Indore, Madhya Pradesh, India

8 - 12 yrs
|

Salary: Not disclosed

Backup & Storage Engineer

Indore, Madhya Pradesh, India

8 - 12 yrs
|

Salary: Not disclosed

Technical Specialist - Windows Admin - L3

Indore, Madhya Pradesh, India

Experience: Not specified

|

Salary: Not disclosed

Trainee Software Engineer

Bangalore Urban, Karnataka, India

Experience: Not specified

|

Salary: Not disclosed

Sr.Technical Specialist ( Windows Admin L3 )

Indore, Madhya Pradesh, India

13.0 - 13.0 yrs
|

Salary: Not disclosed

Mock Interview

Practice Video Interview with JobPe AI

Start Job-Specific Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Google Play App Store
coding practice

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now
Intertec Systems logo
Intertec Systems

RecommendedJobs for You

Databricks logo

SOC Analyst

Databricks

india

Intertec Systems logo

SOC Analyst

Intertec Systems

navi mumbai, maharashtra, india

MindSquare Technologies (India) Pvt. Ltd. logo

SOC Analyst

MindSquare Technologies (India) Pvt. Ltd.

hyderābād

YipitData logo

SOC Analyst

YipitData

delhi, delhi, india

Protera logo

SOC Analyst

Protera

india

Unisys logo

SOC Analyst

Unisys

bengaluru east, karnataka, india

YipitData (Alternative) logo

SOC Analyst

YipitData (Alternative)

delhi

YipitData logo

SOC Analyst

YipitData

delhi, delhi, india

HARMAN India logo

SOC Analyst

HARMAN India

bengaluru, karnataka, india

YipitData logo

SOC Analyst

YipitData

india