SOC L2 Analyst

Role Purpose: The SOC Analyst L2 will be responsible for day-to-day management of SOC operations delivered by the SOC MSSP, coordination with ABCL Lines of Business (LOBs), SIEM/SOAR operations, incident management, security monitoring coverage, service delivery management, SOC transformation initiatives, and regulatory compliance support. The resource will act as the central coordination point between MSSP, LOB stakeholders, technology teams, audit teams and security functions to ensure effective SOC service delivery and successful execution of SOC programs.
Additional Requirement: Ability to support critical incidents, audits and security operations beyond business hours whenever required.
Key Result Areas (KRA) & Responsibilities (SOC Operational Resource):
KRA Responsibilities
SOC Operations & MSSP Management • Act as primary operational coordinator for SOC MSSP SOC services and other Aditya Birla Capital Line of Business (LOB’s) for SOC related matters.
* Track daily alerts, incidents, escalations and operational deliverables across LOB’s.
* Monitor MSSP performance against SLA/KPI commitments viz-a-viz LOB’s deliverables.
LOB Coordination, SOC Onboarding & Program Management
• Coordinate with LOB SPOCs for log onboarding, asset integration, monitoring coverage and security use-case deployment.
• Maintain centralized trackers for onboarding status, dependencies, incidents, audit observations and pending action items.
• Manage escalation matrix and ensure timely resolution of blockers impacting SOC services.
• Track onboarding progress and ensure monitoring coverage for critical business assets.
SOAR & Playbook Management • Maintain SOC use case and playbook inventory.
* Support during development, testing and optimization of SOAR playbooks.
* Ensure automation of triage, enrichment, ticket creation and response activities wherever feasible.
* Track playbook effectiveness and improvements.
Use Case Detection Enhancement • Coordinate tuning of detection rules and correlation use cases.
* Support threat hunting activities and compromise assessments.
* Improve alert quality and reduce false positives.
Regulatory & Operational Compliance Support • Maintain repository of alerts, incidents, RCA reports, playbooks, SOC reports and audit evidence.
* Support RBI, SEBI, IRDAI, CERT-In and Internal Audit requirements.
* Track closure of audit observations and compliance action items.
* Ensure operational records remain audit-ready.
SOC Reporting & Metrics • Prepare daily, weekly and monthly SOC reports.
* Track MTTD, MTTA, MTTR, alert trends, incident trends and SLA compliance.
* Maintain dashboards for monitoring coverage, incidents and automation effectiveness.
* Provide operational MIS to management.
SOC Transformation & Continuous Improvement • Support SIEM, SOAR, UEBA and SOC modernization initiatives.
* Track implementation of new use cases and monitoring controls.
* Drive automation and process optimization initiatives.
* Support cyber resilience and operational maturity improvements.
24x7 Incident Support • Participate in critical incident response activities beyond business hours whenever required.
* Support major security incidents, cyber crisis situations and emergency escalations.
* Coordinate with MSSP and internal teams for rapid incident resolution.
Regulatory Alignment
• RBI Cyber Security & Cyber Resilience expectations
• SEBI CSCRF (Cyber Security & Cyber Resilience Framework)
• CERT-In Incident Reporting Requirements
• IRDAI Cyber Security Guidelines
• Internal Audit, External Audit and Regulatory Assessments
Qualification & Experience
• Education: BE / B.Tech / BSc (IT/Computer Science/Cyber Security) or equivalent.
• Experience: 3-4 years in SOC Operations, Security Monitoring, Incident Response, SIEM or MSSP Operations.
• Required Skills: SIEM, Incident Management.
• Preferred Certifications: CEH, Security+.
• Regulatory Exposure: Experience supporting RBI, SEBI, CERT-In, IRDAI requirements, Security Audits, VAPT and Regulatory Assessments.

Work arrangement
No