SOC L2 || 5-8Yrs || Mumbai-Thane || Immediate joiners ONLY

58 years of experience in Cyber Security Operations SOC Monitoring Incident Response SIEM/SOAR administration and Security Engineering.

Strong hands-on expertise in Palo Alto Cortex XSIAM with primary focus on SOAR automation orchestration playbook development incident management and response automation.

Hands-on experience with Microsoft Defender for Endpoint (MDE) CrowdStrike Falcon and CyberSixgill Threat Intelligence Platform.

Experience in security monitoring threat detection threat hunting incident investigation and response activities.

Ability to develop and optimize use cases correlation rules dashboards reports alerts and automated workflows in XSIAM.

Experience integrating security tools cloud services infrastructure devices and business applications into XSIAM/SIEM/SOAR platforms.

Strong understanding of SOC processes Detection Engineering Threat Intelligence and Incident Response lifecycle.

Ability to identify and assess security risks threats vulnerabilities and control gaps across networks systems applications and cloud environments.

Good understanding of TCP/IP DNS HTTP/HTTPS SMTP MITRE ATT&CK framework and modern cyber-attack techniques.

Experience working with Windows and Linux environments (CentOS/Ubuntu/RHEL).

Knowledge of security technologies including EDR/XDR IDS/IPS WAF Web Proxy and Threat Intelligence platforms.

Experience in automation and scripting using Python PowerShell or Shell Scripting.

Strong analytical troubleshooting and problem-solving skills with the ability to work independently.

Excellent written and verbal communication skills with experience interacting with clients and cross-functional teams.

Proven leadership skills with the ability to mentor and guide SOC analysts and security engineers.

Ability to prioritize tasks meet deadlines and drive continuous improvement -motivated proactive and capable of managing workloads with minimal supervision.

Willingness to work in shifts and provide on-call support when required.

Qualifications :

Bachelors Degree Preferred Certifications: CHFI CEH or equivalent cybersecurity certifications.

Remote Work :

No

Employment Type :

Full-time