SOC Analyst L2/L3
- Capgemini
- 4 - 9 years
- Hyderabad
- 6 days ago
- Email to a friend
- Report this job
Job Description
Role & responsibilities
The SOC L2 Analyst is responsible for advanced threat monitoring, incident investigation, and response using Microsoft Sentinel (SIEM/SOAR). This role goes beyond basic alert triage (L1) and involves deep analysis, threat hunting, use case tuning, and incident response support.
Key Responsibilities
Incident Monitoring & Investigation
- Monitor security alerts in Microsoft Sentinel
- Perform deep-dive analysis of security incidents escalated from L1
- Validate true positives vs false positives
- Conduct log analysis from sources like:
- Azure AD / Entra ID
- Defender for Endpoint
- Office 365
- Firewall, Proxy, IDS/IPS logs
Incident Response
- Execute incident containment and remediation steps
- Perform host/user isolation (via Defender/XDR tools)
- Work with IT teams to mitigate threats
- Create and maintain incident reports with root cause analysis (RCA)
Threat Hunting
- Proactively hunt threats using:
- KQL (Kusto Query Language)
- Custom Sentinel queries
- Identify suspicious patterns, lateral movement, privilege escalation
SIEM Use Case & Rule Management
- Create, tune, and optimize:
- Analytics Rules
- Scheduled queries
- Alert thresholds
- Reduce false positives and alert noise
Automation & SOAR (Important for Sentinel)
- Develop and manage:
- Playbooks (Logic Apps)
- Automate incident response workflows
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security Engineer / AnalystEmployement Type: Full timeContact Details:
Company: CapgeminiLocation(s): Hyderabad+ View Contact
Keyskills: Incident Response Sentinel kql Azure Sentinel
Fraud Alert to job seekers!
₹ Not Disclosed
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in