SOC L2

Job Description

Job Summary: We are looking for a skilled and proactive L2 SOC Engineer with hands-on expertise in Database Activity Monitoring (DAM), Cyber ARK and Web Application Firewall (WAF) technologies. Experience with Privileged Identity Management (PIM) tools such as CyberArk is highly desirable. The candidate will be responsible for handling escalated incidents, threat analysis, and supporting the security infrastructure within a 24x7 SOC environment. Key Responsibilities: Monitor, analyze, and respond to security events and alerts escalated from L1 analysts. Operate and manage DAM and WAF systems for threat detection and response (MANDATORY). Perform threat hunting and deep-dive investigations on suspicious activities using logs and monitoring tools. Work with PIM tools (preferably CyberArk) to manage and secure privileged access. Perform rule tuning and policy management in DAM and WAF platforms to reduce false positives and improve detection. Coordinate with internal IT, application, and compliance teams to contain and remediate threats. Document incident response steps, create detailed reports, and support post-incident reviews. Stay updated on emerging threats and recommend proactive improvements in the SOC processes. Required Skills & Qualifications: 2–4 years of experience working in a Security Operations Center (SOC) environment. MANDATORY: Hands-on experience in: Database Activity Monitoring (DAM) Web Application Firewalls (WAF) (e.g., Imperva, F5, Akamai, Fortinet) Preferred: Experience with Privileged Identity Management (PIM) solutions, especially CyberArk . Strong understanding of networking, OS-level security, and incident response practices. Familiarity with SIEM tools such as Splunk, QRadar, ArcSight, etc. Ability to work in shifts, including 24x7 rotational support if required. Show more Show less