SOC Analyst L2Tata Consultancy Services · Chennai, Tamil Nadu, India

SOC Analyst L2

🗓️ Posted 2026-08-31 Chennai, Tamil Nadu, India Full-time Hybrid ICT
💰 Salary Not shared 📊 Market ₹50,000–₹85,000/mo

Responsibilities

  • ● Execute or lead initial containment, forensics scoping, and stakeholder updates, aligning with best industry practice and internal incident response playbooks.
  • ● Lead investigations across Defender XDR/MDE and CrowdStrike, analyzing process trees, lateral movement, and identity signals.
  • ● Use Tanium for rapid endpoint scoping and live response actions as per policy.
  • ● Analyse Joe Sandbox reports, deriving IOCs and YARA candidates and coordinating containment.
  • ● Design and maintain Cortex XSOAR playbooks, including data enrichment, containment workflows, approvals, notifications, and implement guardrails.
  • ● Author and tune analytic rules in Sentinel, Elastic, and Sigma to reduce false positives, adding entity mapping and suppression logic.
  • ● Conduct proactive hunts using ATT&CK-aligned hypotheses (credential theft, persistence, C2), pivoting across endpoint, identity, network, and cloud logs.
  • ● Maintain GitLab repos, including branching, merge requests, CI checks for detections, and workflows for detection content such as code reviews, approvals, and CI quality checks.

Requirements

  • ● Deep knowledge of SIEM, SOAR, and EDR platforms.
  • ● Deep knowledge of threat intelligence and incident response frameworks.
  • ● Familiarity with MITRE ATT&CK, NIST, and ISO 27001 standards.
  • ● Ability to analyze logs, network traffic, and malware indicators.
  • ● Deep familiarity with Azure AD/Entra ID, Azure Activity/Signin logs, M365 audit logs, AWS, and GCP logs.