Senior Specialist, SOC Analyst

We’re seeking a future team member for the role of Senior Specialist-SOC Analyst to join our Security Operations center team.

This role is located in Pune, India

In this role, you’ll make an impact in the following ways:

• Lead triage and investigation of security alerts, escalating and coordinating incident response as needed.
• Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery.
• Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms to identify true positives and reduce false positives.
• Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework.
• Mentor junior analysts and provide guidance on investigation techniques, documentation standards, and operational best practices.
• Coordinate with Threat Intelligence to enrich investigations, track adversary TTPs, and proactively hunt for indicators of compromise.
• Partner with Engineering teams to tune detections, improve log fidelity, and strengthen preventive controls.
• Create clear, actionable incident reports and executive summaries; contribute to metrics and trend analysis.
• Support purple team exercises and post-incident reviews to capture lessons learned and drive continuous improvement.
• Ensure adherence to regulatory and security policies; maintain audit-ready documentation for investigations and incidents.

To be successful in this role, we’re seeking the following:

• 5+ years of experience in SOC operations, incident response, or threat detection (Tier 2 level).
• Strong hands-on expertise with: SIEM platforms (e.g., Splunk, Sentinel, QRadar), EDR tools (e.g., CrowdStrike, Microsoft Defender), SOAR platforms
• Deep understanding of: Network security, Windows/Linux systems, and identity management, Cloud logging and security monitoring
• Experience with: MITRE ATT&CK framework, threat hunting, and detection tuning, Incident response frameworks (NIST 800-61, NIST CSF, CIS Controls)
• Strong analytical, problem-solving, and stakeholder management skills.
• Proficiency in scripting/automation (Python, PowerShell).
• Excellent documentation and communication skills, including executive reporting.
• Relevant certifications such as GCIH, GCIA, GCFA, GNFA, CISSP, or CCSP or equivalent experience
• Experience with: Case management tools (e.g., ServiceNow), Threat intelligence platforms and malware analysis tools
• Prior exposure to large-scale enterprise SOC environments.
• The position requires flexibility to work across shifts and to support weekend and public holiday coverage as operational needs require.