SOC Analyst

Intapp is looking for a Tier 2 Cybersecurity SOC analyst with well-versed skills in Incident handling. The candidate will work with Cybersecurity and cross-team to triage, investigate and respond to cybersecurity incidents. 

The working hours for this candidate shall be between 8am local time to 5PM local time, however, if an incident comes up or is escalated then they will need to stay with the incidents until it is handed over to the next on-call team member. 

What you will do: 

•  Continuously review and analyze logs from Microsoft 365, Azure Sentinel, and Microsoft Defender, Network Firewall, Application firewall and other log sources to identify potential security incidents.

• Ensure proper logging and monitoring practices are in place. 

• Evaluate incidents identified by Tier 1 analysts and escalate them as necessary.

• Conduct in-depth analysis and take appropriate actions to contain and remediate threats using Azure Sentinel, Microsoft Defender, Network Firewall and Web application firewall. 

•  Update and monitor existing incidents to ensure they are being addressed in a timely and effective manner.

• Track the progress of incident resolution and provide regular updates to stakeholders. 

• Document and report on security incidents, including detailed analysis and recommendations for improvement.

• Prepare incident reports and post-incident analysis using Microsoft Sentinel Workbooks. 

•  Provide support and guidance to Tier 1 SOC Analysts during their investigations.

• Utilize Azure Sentinel to monitor and analyze security alerts from various sources.

• Use Kusto Query Language (KQL) to create custom queries for advanced threat detection and investigation. 

•  Integrate threat intelligence feeds into Azure Sentinel to enhance detection capabilities.

• Use indicators of compromise (IOCs) to identify affected systems and the extent of attacks. 

• Stay up to date with the latest cybersecurity trends, threats, and technologies.

• Participate in training and development programs to enhance your skills and knowledge. 

you will need:  

• 5+ years of experience in Incident handling role. 

• 8+ years of experience in IT and/or Cybersecurity. 

• Strong knowledge of Microsoft Sentinel, KQL, and Microsoft Defender. 

• Strong knowledge of MITRE framework. 

• Firm knowledge of OWASP-Top 10 vulnerability and attacks. 

• Strong inter-personal communication skills. 

What you'll gain at Intapp: 

Our culture at Intapp emphasizes accountability, responsibility, and growth. We support each other in a positive, open atmosphere that fosters creativity, approachability, and teamwork. We’re committed to creating a modern work environment that’s connected yet flexible, supporting both professional success and work-life balance. In return for your passion, commitment, and collaborative approach, we offer: 

• Competitive base salary plus variable compensation and equity 

• Generous paid parental leave, including adoptive leave 

• Traditional comprehensive benefits, plus: 

• Generous Paid Time Off 

• Tuition reimbursement plan 

• Family Formation benefit offered by Carrot 

• Wellness programs and benefits provided by Modern Health 

• Paid volunteer time off and donation matching for the causes you care about 

• Opportunities for personal growth and professional development supported by a community of talented professionals 

• An open, collaborative environment where your background and contributions are valued 

• Experience at a growing public company where you can make an impact and achieve your goals 

• Open offices and kitchens stocked with beverages and snacks 

 #LI-ES1