Security operation Analyst L2

About Position:

As a SOC L2 Analyst, you will play a crucial role in the Security Operations Center by handling complex security incidents, conducting deep-dive investigations, and mentoring L1 analysts. You will leverage advanced security tools and technologies to detect, analyze, and respond to sophisticated cyber threats.

• Role: Security operation Analyst L2
• Location: Pune
• Experience: 3 to 6 Years
• Job Type: Full Time Employment

What You'll Do:

• As a SOC L2 Analyst, you will play a pivotal role in defending the organization's information assets by handling complex security incidents, performing detailed investigations, and mentoring L1 analysts.
• This position involves using advanced security tools to detect, analyze, and respond to sophisticated cyber threats.
• You will also contribute to improving SOC processes and ensuring the organization stays ahead of evolving cybersecurity challenges.

Advanced Incident Response:

• Investigate and resolve escalated security incidents from L1 analysts.
• Perform in-depth root cause analysis and correlation of security events.
• Develop and execute mitigation and remediation strategies to address incidents.

Threat Hunting and Analysis:

• Conduct proactive threat hunting activities using tools like Splunk, CrowdStrike, and Extra Hop.
• Analyze threat intelligence to identify and mitigate potential risks.

Endpoint and Network Security:

• Utilize Cisco AMP and CrowdStrike for advanced endpoint protection and threat analysis.
• Monitor and analyze network traffic using Extra Hop to detect anomalies and potential intrusions.

Log Management and SIEM Optimization:

• Perform detailed log analysis and event correlation using Splunk.
• Recommend and configure SIEM rules and alerts to enhance detection capabilities.

Cloud Security:

• Use CASB solutions to monitor and secure cloud services and applications.

Collaboration and Escalation:

• Work closely with cross-functional teams to coordinate incident response efforts.
• Escalate critical incidents to L3 analysts or specialized teams when necessary.

Documentation and Reporting:

• Document findings, actions, and lessons learned in platforms like JIRA and ServiceNow.
• Prepare comprehensive incident reports and briefings for management.

Mentoring and Training:

• Guide and mentor L1 analysts to build their technical and investigative skills.
• Conduct training sessions and workshops on advanced security topics and tools.

Continuous Improvement:

• Stay updated on emerging cybersecurity threats, trends, and technologies.

Expertise You'll Bring:

• Proficiency with tools like Cisco AMP, Splunk, Duo, CASB, CrowdStrike, Extra Hop, ServiceNow, and JIRA.
• Strong knowledge of network and endpoint security principles.
• Hands-on experience with incident response, threat hunting, and log analysis.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly promotion cycles and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Our company fosters a values-driven and people-centric work environment that enables our employees to:

• Accelerate growth, both professionally and personally
• Impact the world in powerful, positive ways, using the latest technologies
• Enjoy collaborative innovation, with diversity and work-life wellbeing at the core
• Unlock global opportunities to work and learn with the industrys best

Let’s unleash your full potential at Persistent

“Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”