The Role
Monitors, investigates, and remediates security alerts and complex incidents in a 24x7 SOC. Conducts threat hunting, analyzes SIEM, EDR, network, and application data, develops detection techniques, performs root cause analysis, and prepares SOC documentation and reports. Mentors junior analysts, maintains security tool health, collaborates across security teams, and provides technical leadership during critical incidents.
Summary Generated by Built In
About Techdefence:
Techdefence is a leading cybersecurity solutions provider specializing in offensive and defensive security, AI-powered threat intelligence, and enterprise security frameworks. Our comprehensive services and product portfolio cater to global enterprises, government agencies, and critical infrastructure, ensuring proactive protection against cyber threats.
With a strong R&D focus, Techdefence delivers cutting-edge security solutions in the areas of cloud security, network security, application security, penetration testing, SOC solutions, and managed security services. Our expertise in cyber resilience, risk management, and compliance frameworks (ISO 27001, NIST, GDPR, PCI-DSS, etc.) positions us as a trusted partner for organizations worldwide.
Role Overview:
We are seeking a skilled Cyber Security Analyst Level 2 to enhance our security monitoring, incident response, brand protection, and threat intelligence capabilities under 24x7 SOC operations. The Level 2 Security Analyst will play a critical role in identifying and mitigating potential threats through advanced monitoring, data analysis, and collaboration with various stakeholders. This role involves leading complex investigations, mentoring junior analysts, and developing advanced threat detection techniques.
Key Responsibilities:
- Lead the monitoring, triaging, investigation, and remediation of security alerts within defined SLAs, while providing guidance and support to L1 SOC analysts.
- Manage and respond to complex and high-severity security incidents, coordinating with relevant internal teams and stakeholders to ensure timely resolution and effective containment.
- Develop and implement advanced detection and analytical techniques to identify sophisticated threat actors, emerging attack patterns, and evolving tactics, techniques, and procedures (TTPs).
- Conduct proactive threat hunting activities to identify hidden threats, suspicious behavior, and potential indicators of compromise across the enterprise environment.
- Analyze and correlate large volumes of security data from SIEM, EDR, network, and other security solutions to identify novel threats and attack techniques.
- Collaborate with the Cyber Defense Center and other security teams to develop and continuously improve threat-hunting strategies, detection rules, and security analytics.
- Perform detailed root cause analysis of security incidents and communicate findings, impact, and recommendations to both technical teams and leadership.
- Develop and maintain Standard Operating Procedures (SOPs), incident documentation, knowledge articles, and comprehensive end-of-shift reports.
- Prepare, review, and validate daily, weekly, and monthly SOC reports, ensuring accuracy, completeness, and timely submission.
- Oversee daily health checks of security tools and components to ensure optimal availability and performance.
- Mentor and train junior analysts, promoting knowledge sharing and continuous improvement within the SOC team.
- Work effectively in a 24x7 SOC environment, including rotational and night shifts, and provide leadership and technical support during critical security incidents.
Qualifications:
Education:
- Bachelor's degree in information technology, Computer Science/Engineering, or equivalent.
- Desirable certifications: Security+, CEH, GCIH, GCIA, GSEC, CISSP, CISM.
Experience:
- Minimum 3+ years in SOC monitoring and incident management.
- Extensive experience in Security Operations, Incident Response, Detection Engineering, Offensive
- Security/Red Team, or Cyber Threat Intelligence.
- Proficiency with SIEM processes and products (e.g., Microsoft Sentinel SIEM, EDR, CSPM).
- Experience analyzing systems, network, and application logs for advanced attack techniques.
- Experience consuming and analyzing Cyber Threat Intelligence for actionable insights.
Technical Skills:
- Advanced deep packet and log analytics.
- Proficiency in forensic and malware analysis.
- Expertise in cyber threat and intelligence gathering and analysis.
Analytical Skills: Ability to analyze large and complex data sets to identify sophisticated threats.
Communication Skills: Effectively communicate complex findings to technical staff and leadership.
Collaboration Skills: Work effectively across a complex, geographically dispersed organization, leading cross-functional teams.
Problem-Solving Skills: Develop innovative threat detection methods and remediation plans, addressing complex security challenges.
Leadership Skills: Provide mentorship and guidance to junior analysts, fostering a collaborative and high performing team environment.
Skills Required
- Bachelor's degree in Information Technology, Computer Science, Computer Engineering, or equivalent
- Minimum 3+ years of experience in SOC monitoring and incident management
- Experience in security operations, incident response, detection engineering, offensive security/red team, or cyber threat intelligence
- Proficiency with SIEM processes and products, including Microsoft Sentinel, EDR, and CSPM
- Experience analyzing system, network, and application logs for advanced attack techniques
- Experience consuming and analyzing cyber threat intelligence
- Advanced deep packet and log analytics skills
- Proficiency in forensic and malware analysis
- Expertise in cyber threat and intelligence gathering and analysis
- Security+, CEH, GCIH, GCIA, GSEC, CISSP, or CISM certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
TechDefence Labs is an AI-augmented, human-led cybersecurity company that protects digital assets for organizations worldwide. Its offerings include an AI-native platform spanning cybersecurity, compliance, and privacy, along with web, mobile, and API penetration testing, 24/7 security operations, cloud-security assessments, regulatory compliance support, and virtual CISO services. The company combines research-oriented expertise with managed security and consulting to help clients prevent, detect, and respond to threats.
