SOC Analyst L2
Chennai · Entry Level
Applicants who checked fit first are 3.1× more likely to hear back
Your score for this role already exists
ASAI compared this JD against 41 signals - skills, seniority, domain, stack overlap etc. Add a resume and it unlocks in about 30 seconds.
Always free · no credit card · 1 tap with Google
What we know about this role
LOW
Our tracked job listings for vaultinfosec show limited recent activity.
First 72 hours
Window passed - posted 81d agoEarly applicants get seen before the pile builds.
Not a repost
The first time we've seen this listing - it hasn't been closed and reopened.
Skills required
9 listedYou almost certainly match several of these already. Unlock your skill map to see the matches, the gaps, and what to fix first.
Job description
- Perform in-depth analysis and triage of security alerts escalated from L1 analysts across SIEM, EDR, NDR, and other security tools
- Conduct incident investigation and validation to determine scope, impact, and root cause of security events
- Lead incident response activities including containment, eradication, and recovery coordination
- Perform threat hunting using logs, threat intelligence, and behavioral analysis techniques
- Analyze log sources (Windows, Linux, Firewall, Proxy, Cloud, Identity, etc.) to identify malicious activity
- Correlate events across multiple platforms to identify advanced threats and attack patterns
- Develop and improve detection use cases, correlation rules, and alert tuning within SIEM platforms
- Reduce false positives by performing alert optimization and fine-tuning
- Create and maintain incident response playbooks and standard operating procedures (SOPs)
- Collaborate with L3, IR teams, and stakeholders for complex incident handling and escalation
- Perform digital forensics (basic to intermediate) including endpoint and log analysis
- Utilize threat intelligence feeds to enrich alerts and investigations
- Ensure proper documentation of incidents, findings, and actions taken in ticketing systems
- Support compliance and audit requirements by maintaining evidence and reports
- Participate in post-incident reviews (PIR) and recommend improvements
- Mentor and guide L1 analysts on investigation techniques and best practices
- Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, Sentinel, LogRhythm, etc.)
- Strong understanding of EDR/XDR tools (e.g., CrowdStrike, Defender, SentinelOne, etc.)
- Knowledge of MITRE ATT&CK framework for threat mapping
- Experience with log analysis, query writing, and correlation logic
- Familiarity with network protocols, attack vectors, and common threat tactics
- Basic scripting knowledge (Python / PowerShell / Bash) is an added advantage
Tools to land this role
PremiumYour match score, skill map and tracker stay free.
Ground Reality
PremiumSpot the dealbreakers in this 340-word post before you apply
Skip jobs with hidden dealbreakers. See what they actually need, what's easy to miss, and how they describe the team.
Ground Reality on every job, plus Insider Path, practice interviews and resume tailoring.
Insider Path
PremiumFind someone who can refer you here
We help you find people there who worked or studied where you did, and draft your first message and follow-up.
Free · no signup
Get tomorrow's jobs before you have to search
Daily job drops, skill trends and free resources - posted straight to the group. Leave any time.
No spam. Just jobs and resources.
Why people use ASAI
Someone shared one job with you. ASAI keeps finding the rest.
Scored, not searched. Every role ranked against your actual profile.
Alerts as often as hourly. Reach new roles while the pile is still small.
Skill gaps, spelled out. See exactly which requirements you don't meet yet.
Verified jobs, only. Say no to ghost jobs. Your time deserves respect.
More Security Engineer roles in Chennai
See all
Keep browsing