Security Operations Center Analyst- L2

Job Description – SOC Analyst (L2) Role: Security Operations Center (SOC) – L2 Analyst Experience 4–7 years of experience in Cyber Security Operations / SOC3+ years of hands-on experience in security monitoring, incident investigation, and incident responseKey Responsibilities Investigate and analyze security incidents escalated by the L1 SOC teamPerform alert triage, log analysis, event correlation, and root cause analysisValidate security alerts and distinguish true positives from false positivesInvestigate phishing, malware, unauthorized access, privilege escalation, and cloud security incidentsMonitor and analyze security events across endpoints, networks, cloud, and identity platformsCoordinate with L3 engineers, infrastructure teams, and other stakeholders for incident remediationMaintain incident documentation, investigation reports, and ticket updatesEnsure SLA adherence in a 24x7 SOC environmentMust-Have Skills SIEM: Splunk, QRadar, Microsoft Sentinel, LogRhythmEDR/XDR: CrowdStrike, Microsoft Defender, SentinelOne, Cortex XDRSecurity Monitoring: Firewall, IDS/IPS, WAF, VPN, Email Security, Endpoint SecurityLog Analysis: Windows, Linux, Active Directory, Microsoft 365, CloudTrailThreat Analysis: IOC validation, Threat Intelligence, MITRE ATT&CKNetworking: TCP/IP, DNS, HTTP/HTTPS, SMTPGood-to-Have Skills AWS or Azure securityPowerShell or PythonKnowledge of the NIST Incident Response FrameworkPreferred Certifications Security+SC-200CEHCySA+Splunk Certified UserIBM QRadar SIEM FoundationEducation Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field. Work Location & Shift 24x7 rotational shiftWillingness to work on weekends and holidays as required Keywords SOC, SIEM, Splunk, QRadar, Microsoft Sentinel, EDR, CrowdStrike, Incident Response, Threat Hunting, Log Analysis