SOC L2 Analyst (OT Security)

About the Role

Key Responsibilities

• Investigate and analyze **security alerts and incidents**, including escalations from L1 analysts
• Perform **in-depth threat analysis** across IT and OT environments
• Act as an **incident responder** for security events and recommend remediation actions
• Monitor and manage **SIEM alerts, logs, and SOC tickets** within SLA timelines
• Escalate critical incidents to L3/Senior Analysts when required
• Support and mentor **junior SOC analysts (L1)**
• Collaborate with internal teams to improve **threat detection and response capabilities**
• Contribute to SOC documentation, runbooks, and knowledge base

Required Skills & Experience

• Minimum **5+ years of experience** in SOC / Cybersecurity operations
• Strong experience with **SIEM tools** (Splunk, QRadar, ArcSight, Azure Sentinel, etc.)
• Hands-on experience in **incident detection, investigation, and response**
• Strong knowledge of **network security, logs, and attack patterns**
• Experience with security tools such as **EDR, IDS/IPS, Firewalls, Vulnerability Scanners**
• Familiarity with **MITRE ATT&CK framework**
• Good understanding of **Windows, Linux, and network environments**

Preferred (Nice to Have)

• Experience with **OT / ICS / SCADA security environments**
• Knowledge of protocols like **Modbus, DNP3, BACnet**
• Exposure to **industrial cybersecurity frameworks**
• Basic scripting knowledge (Python, PowerShell, Bash)

Certifications (Preferred)

• SC-200, GCIH, CEH, or equivalent cybersecurity certifications
• SIEM certifications (Splunk, Azure Sentinel, etc.)
• OT Security certifications (e.g., Nozomi) are a plus

Ideal Candidate

• SOC L2 Analyst / Senior Security Analyst
• Experience working in **MSSP or enterprise SOC environments**
• Strong analytical and problem-solving skills
• Ability to work in a **24x7 SOC environment**

Job Type: Permanent