We are seeking a SOC Analyst who is an expert in Splunk SPL and capable of performing complete end-to-end investigations without relying on the traditional L1/L2/L3 model. The candidate must analyze alerts deeply using Splunk, CrowdStrike EDR, and Windows/Linux logs, correlating evidence across multiple data sources. They should have strong knowledge of Windows, Linux, and AD/Azure AD to determine true vs false positives confidently. The role also requires developing and fine-tuning detection/content rules, correlation searches, and alert logic based on SOC needs. Strong documentation, accountability, and the ability to operate independently in a Hybrid SOC environment are essential.

Key Responsibilities:

Perform complete end-to-end security investigations using Splunk, CrowdStrike, and system logs
Analyze security alerts deeply and correlate evidence across multiple data sources
Develop and fine-tune detection rules, content rules, and correlation searches
Create and maintain alert logic based on evolving SOC requirements
Investigate Windows and Linux system logs for security incidents
Leverage AD/Azure AD knowledge to identify security threats
Document investigation findings, procedures, and recommendations thoroughly
Operate independently with high accountability in hybrid SOC environment
Continuously improve detection capabilities and reduce false positive rates

Requirements:

Expert-level proficiency in Splunk SPL (Search Processing Language)
Strong hands-on experience with CrowdStrike EDR platform
Deep understanding of Windows and Linux operating systems
Solid knowledge of Active Directory and Azure AD architecture
Proven ability to perform end-to-end security investigations independently
Experience in developing and tuning SIEM detection rules and correlation searches
Strong analytical skills to differentiate true positives from false positives
Ability to work in a hybrid SOC environment without traditional tier structure

Required Skills:

Splunk SPL
CrowdStrike EDR
Windows Security
Linux Security
Active Directory
Azure AD
SIEM
Threat Detection
Incident Response
Log Analysis
Correlation Searches
Security Monitoring

Disclaimer:

The job location mentioned in this description is based on publicly available information or company headquarters. Candidates are advised to verify the exact job location directly with the employer before applying.

More Jobs at Lanvaus

SOC Analyst - Splunk Expert

hyderabad

3.0 - 8.0 yrs

INR 6 - 10 Lacs

Mock Interview

Practice Video Interview with JobPe AI

Start Cyber Security Interview

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now

Lanvaus

Login to

Please Verify Your Phone or Email

Confirm Action

SOC Analyst - Splunk Expert