Jr SOC Analyst
- GSPANN
- 5 - 8 years
- Hyderabad
- 27 days ago
- Email to a friend
- Report this job
Job Description
Job Title: Junior SOC Analyst /Senior SOC Analyst
Location: Hyderabad
Experience: 5 7+ years in Cybersecurity
Role Purpose
Execute advanced security monitoring, threat detection, incident response, and proactive threat hunting across Microsoft Sentinel, Defender XDR, SOAR, and EDR platforms within a managed SOC environment.
Core Responsibilities
- Monitor alerts generated by Microsoft Sentinel and Defender platforms.
- Investigate alerts, validate malicious activity, and escalate or remediate per defined playbooks.
- Respond to cyber events including phishing, malware, credential abuse, lateral movement, cloud attacks, identity threats, and endpoint intrusions.
- Conduct hypothesis-based and intel-driven hunts using KQL, UEBA, IOC feeds, TI enrichment, and Defender telemetry.
- Execute automated and semi-automated workflows; provide feedback for logic improvements.
- Determine severity, containment strategies, and response paths following MITRE ATT&CK and NIST IR lifecycle frameworks.
- Maintain accurate case records, timelines, evidence, analyst notes, and RCA documentation in SOC platforms (ServiceNow/Jira/Sentinel Cases).
- Recommend improvements for tuning alerts, refining rules, reducing false positives/negatives, and enhancing watchlists.
- Create customer-facing IR summaries detailing severity, impact, timeline, outcome, and lessons learned.
- Operate within SLA/OLA targets and ensure compliance with security frameworks and customer policy requirements.
Required Technical Skills
- Cybersecurity Experience: 27+ years
- SOC Experience: 4+ years
- Hands-on Microsoft Security Stack experience
- Microsoft Sentinel SIEM Operations
- KQL Querying and Log Analysis
- Microsoft Defender XDR (Identity, Endpoint, Email, Cloud Apps)
- Security Incident Response & Forensics
- SOAR (Logic Apps awareness, runbook execution)
- Cloud Security (Azure, Entra ID)
- Threat Intelligence & MITRE ATT&CK Mapping
- Network, Host, and Identity Security Fundamentals
- Experience with EDR platforms (Defender, CrowdStrike, SentinelOne)
Preferred Certifications
- Microsoft SC-200, AZ-500
- Cybersecurity: CEH, Security+, CySA+, GCIA, GCIH
- Value Add: SC-300, SC-100
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: OtherRole Category: OtherRole: OtherEmployement Type: Full timeContact Details:
Company: GSPANNLocation(s): Hyderabad
Keyskills: Cyber Security Sentinel SOC KQL Microsoft Defender
Similar positions
GSPANN
COMPANY PROFILE: GSPANN is a US California Bay Area based consulting services provider focused on implementations in the Enterprise Content Management, Business Intelligence & Mobile Solution initiatives. More than 90% of our current clientele are FORTUNE 1000 organizations. We specialize in str...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in