SOC Analyst L2/L3
- Capgemini
- 4 - 9 years
- Hyderabad
- 4 days ago
- Email to a friend
- Report this job
Job Description
Role & responsibilities
The SOC L2 Analyst is responsible for advanced threat monitoring, incident investigation, and response using Microsoft Sentinel (SIEM/SOAR). This role goes beyond basic alert triage (L1) and involves deep analysis, threat hunting, use case tuning, and incident response support.
Key Responsibilities
Incident Monitoring & Investigation
- Monitor security alerts in Microsoft Sentinel
- Perform deep-dive analysis of security incidents escalated from L1
- Validate true positives vs false positives
- Conduct log analysis from sources like:
- Azure AD / Entra ID
- Defender for Endpoint
- Office 365
- Firewall, Proxy, IDS/IPS logs
Incident Response
- Execute incident containment and remediation steps
- Perform host/user isolation (via Defender/XDR tools)
- Work with IT teams to mitigate threats
- Create and maintain incident reports with root cause analysis (RCA)
Threat Hunting
- Proactively hunt threats using:
- KQL (Kusto Query Language)
- Custom Sentinel queries
- Identify suspicious patterns, lateral movement, privilege escalation
SIEM Use Case & Rule Management
- Create, tune, and optimize:
- Analytics Rules
- Scheduled queries
- Alert thresholds
- Reduce false positives and alert noise
Automation & SOAR (Important for Sentinel)
- Develop and manage:
- Playbooks (Logic Apps)
- Automate incident response workflows
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security Engineer / AnalystEmployement Type: Full timeContact Details:
Company: CapgeminiLocation(s): Hyderabad
Keyskills: Incident Response Sentinel kql Azure Sentinel
Capgemini
Capgemini is headquartered in Paris, France and operates in more than 40 countries. They are one of the world’s largest providers of Consulting, Technology, and Outsourcing. Above all, Capgemini is a people company— 120,000 people in North America, Europe, South America and the Asia ...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in