Senior SOC Analyst-Noida

Company: Fonada / Shivtel Communications Pvt. Ltd.
Job Title: Senior SOC Analyst
Department: Information Security / Cyber Security
Experience: 5+ Years
Location: Noida
Employment Type: Full-Time
About Fonada
Fonada is a leading AI-powered CPaaS platform helping enterprises transform customer communication through Voice, SMS, WhatsApp Business API, Contact Center, IVR, AI Voice Bots, Chatbots, and Conversational AI solutions. We are committed to building secure, scalable, and reliable communication platforms for businesses across industries.
About the Role
We are looking for an experienced Senior SOC Analyst to join our Cyber Security team. The role will be responsible for monitoring security events, investigating and responding to incidents, performing threat detection and hunting, and strengthening the organization's security posture.
The ideal candidate should have strong hands-on experience with SOC Operations, Incident Response, SIEM, EDR/XDR, Cloud Security, threat intelligence, and security investigations. The candidate should be comfortable handling incidents independently and demonstrating strong analytical and technical troubleshooting skills.
Key Responsibilities
Monitor and analyze security alerts from SIEM, EDR/XDR, WAF, Firewall, Email Security and Cloud Security platforms.
Perform end-to-end incident detection, investigation, containment, eradication and recovery.
Investigate security incidents involving malware, phishing, account compromise, credential theft, suspicious endpoint activity and unauthorized access.
Analyze Windows Security Events, authentication logs, network traffic, email headers and other security telemetry.
Conduct threat hunting to identify suspicious activities and potential indicators of compromise.
Develop and optimize SIEM detection rules, correlation rules and queries to improve detection accuracy and reduce false positives.
Write and analyze Splunk SPL queries for security investigations and threat detection.
Investigate suspicious PowerShell, command-line and process execution activity using EDR/XDR tools.
Analyze MITRE ATT&CK techniques and map observed attacker behavior to relevant tactics and techniques.
Investigate phishing campaigns using SPF, DKIM and DMARC results, email headers and sender infrastructure.
Investigate suspicious sign-ins and account compromise in Microsoft Entra ID / Azure AD, including session and credential-related activity.
Analyze WAF and firewall events to identify DDoS, brute-force and credential-stuffing attacks.
Support vulnerability and CVE assessment, including prioritization based on CVSS and environmental/business context.
Coordinate with IT, Infrastructure, Network, Cloud and Application teams during security incidents.
Prepare detailed incident reports, investigation findings, root-cause analysis and remediation recommendations.
Maintain accurate incident documentation, evidence and SOC operational records.
Participate in continuous improvement of SOC processes, playbooks and security monitoring capabilities.
Required Skills & Technical Expertise
SIEM: Splunk or equivalent SIEM platforms
EDR/XDR: CrowdStrike, Microsoft Defender for Endpoint or equivalent
Identity & Cloud: Microsoft Entra ID / Azure AD and cloud security concepts
Strong understanding of Windows Security Events, authentication and endpoint telemetry
Strong knowledge of Incident Response and SOC Operations
Knowledge of MITRE ATT&CK Framework
Working knowledge of SPF, DKIM and DMARC
Experience analyzing email headers and phishing attacks
Knowledge of WAF, Firewall, DDoS, brute-force and credential-stuffing attacks
Strong understanding of IOC/IOA, threat intelligence and threat hunting
Experience with Splunk SPL / SIEM query development
Understanding of CVE, CVSS and vulnerability management
Knowledge of cybersecurity frameworks, standards and security best practices
Strong analytical and problem-solving skills
Key Competencies
Incident investigation and response
Threat detection and hunting
Log and security event analysis
Security alert triage
Root-cause analysis
Detection engineering
Risk assessment
Technical documentation and reporting
Cross-functional coordination
Ability to work effectively in a 24×7 SOC environment, if required
Education & Experience
Bachelor's degree in Cybersecurity, Computer Science, Information Technology or a related field.
5+ years of hands-on experience in SOC Operations, Security Operations, Incident Response or Cybersecurity.
Relevant certifications such as CEH, CompTIA Security+, CySA+, GCIH, GCIA, CISSP, SC-200 or equivalent will be an advantage.
What We Are Looking For
The candidate should be able to demonstrate practical investigation skills rather than only theoretical cybersecurity knowledge. Experience should include handling real-world security scenarios, writing SIEM queries, analyzing logs and headers, investigating endpoint behavior, identifying attack techniques and coordinating appropriate containment and remediation.
The assessment for this role specifically covers fundamentals, technical depth, scenario-based investigation, and hands-on query/log/header analysis, including phishing and account compromise, EDR investigations, WAF/DDoS analysis, Splunk SPL, email authentication and CVE validation.

Work arrangement
No