Security Operations Specialist

I am looking for 2-3 L2 SOC resources who can join us (LTM) immediately/within a month.
Send me your profiles to: [email protected]
Role: Cyber Security SOC L3 Analyst
Experience: 6-8 Years
Location: India
Roles & Responsibilities:
Lead advanced monitoring and analysis of security alerts across multiple platforms
Perform deep-dive investigation of complex and high-severity incidents, including root cause analysis and attack chain reconstruction
Drive incident response activities including containment, mitigation, and recovery coordination
Act as the primary technical escalation point for L2 analysts and provide guidance on complex investigations
Lead overall security monitoring, detection strategy, and client support for critical incidents
Ensure effective incident identification, assessment, reporting, communication, mitigation, and continuous monitoring
Ensure SLA compliance, drive process adherence, and lead process improvements to enhance SOC maturity
Define, review, and maintain SOPs, playbooks, and operational documentation aligned with best practices
Prepare and present detailed reports, RCA documents, and client-facing summaries for major incidents
Participate in on-call rotation for handling critical escalations and security incidents
Lead initiatives to strengthen the SOC framework, optimize processes, and address operational challenges
Stay updated with emerging threats, attack techniques, and industry best practices
Perform threat management, threat modeling, and identify advanced threat vectors
Design, develop, and optimize use cases, correlation rules, and detection logic across SIEM/XDR platforms
Identify detection gaps, improve monitoring coverage, and reduce false positives through tuning
Drive threat hunting activities and proactive detection of advanced threats
Collaborate with stakeholders (network, infra, IAM, application teams) for end-to-end incident resolution
Build and maintain strong working relationships with internal teams and clients
Experience & Skills:
Strong experience in Information Technology and Information Security, preferably in SOC/MSSP environments
Proven expertise in incident response, advanced threat investigation, and threat hunting
Hands-on experience with multiple SIEM and XDR platforms (e.g., CrowdStrike Falcon Next-Gen SIEM, Microsoft Sentinel, Splunk, Defender, Sentinel One SIEM)
Strong understanding of cyber-attack techniques, threat vectors, risk management, and incident lifecycle
Experience in use case creation, tuning, and MITRE ATT&CK mapping
Knowledge of log management, correlation, and multi-source data analysis
Experience in Windows, Linux, Unix environments and exposure to applications, databases, and middleware security
Strong experience in report preparation, dashboards, and documentation for client and internal use
Excellent communication, stakeholder management, and initiative skills
Experience in vendor coordination and cross-team collaboration
Ability to handle high-pressure situations and manage critical incidents effectively
Strong analytical, problem-solving, and decision-making skills
Demonstrated ability to mentor teams and lead technical initiatives
Education/Certification: -
Ø University degree (Bachelors’ degree) or equivalent experience in computer science, information systems, any new cybersecurity course is added as an advantage.
Ø CompTIA Security+ certificate or any entry level Cyber Security certifications are mandatory
Ø Any Certification on Cloud certification would be an added advantage.

Skills
Linux, Data Analysis, Risk Management, Documentation

Experience
6-8 yrs

Work arrangement
No