Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With nearly 245,000 employees and business partners across 65 countries, we deliver on the promise of helping our clients, colleagues, and communities thrive in an ever-changing world. Wipro is an Equal Employment Opportunity employer and makes all employment and employment-related decisions without regard to a person's race, sex, national origin, ancestry, disability, sexual orientation, or any other status protected by applicable law.
Website
http://www.wipro.com
SOC Analyst – L2/L3
CrowdStrike EDR & Next-Gen SIEM
SOC Analyst – L2/L3
hands-on experience with CrowdStrike Falcon EDR and CrowdStrike Next-Gen SIEM
Key Responsibilities
Security Monitoring & Incident Response
- Act as the
L2/L3 escalation point
for complex and high-severity security incidents. - Perform advanced triage, investigation, containment, and remediation of security incidents.
- Investigate malware, ransomware, phishing, credential compromise, suspicious authentication, privilege escalation, persistence, lateral movement, and suspected data exfiltration.
- Correlate endpoint, identity, network, cloud, email, and other security telemetry during investigations.
- Perform root-cause analysis and recommend corrective and preventive actions.
- Coordinate containment, remediation, and recovery activities with infrastructure, identity, network, cloud, and security teams.
- Maintain clear incident timelines, investigation findings, evidence, and remediation recommendations.
CrowdStrike Certification Requirement
- Relevant
CrowdStrike certification is preferred
at the time of joining. - Candidates who are not CrowdStrike certified must be
willing to obtain the applicable CrowdStrike Next-Gen SIEM certification within 3 months of joining
. - Candidates are expected to maintain hands-on proficiency with
CrowdStrike Falcon EDR and CrowdStrike Next-Gen SIEM
as part of the L2/L3 SOC role.
.
Required Skills & Experience
4–8 years of SOC/cybersecurity experience
, with practical security monitoring and incident-response experience.- Strong
hands-on experience with CrowdStrike Falcon EDR
. - Hands-on experience with
CrowdStrike Next-Gen SIEM
. - Strong knowledge of security incident investigation, triage, containment, and response.
- Experience with SIEM monitoring, event correlation, log analysis, and detection tuning.
- Practical experience with
threat hunting, IOC analysis, and detection engineering
. - Strong understanding of endpoint telemetry and attacker behavior.
- Good working knowledge of
MITRE ATT&CK and Cyber Kill Chain
. - Experience investigating Windows/Linux endpoints, Active Directory/identity, authentication, network, and cloud-related events.
- Good understanding of TCP/IP, DNS, HTTP/S, SMTP, SMB, firewalls, proxies, VPNs, and common security telemetry.
- Ability to independently investigate and manage high-severity security incidents.
- Strong analytical, troubleshooting, documentation, and communication skills.
- Willingness to work in a
24x7 SOC environment
, including rotational shifts as required.
