Analyst II - SIEM/SecOps

About the role

We are looking for a SOC L2 Analyst with a strong investigative mindset and hands-on comfort operating without a traditional GUI-driven workflow — this role requires fluency in query languages to search, correlate, and triage data directly. You'll be one of the early analysts shaping detection and response practices across a modern, cloud-native, hybrid environment spanning Kubernetes microservices, multi-cloud infrastructure, and traditional corporate IT.

What you'll do

• Monitoring & Escalation Handling
• Perform full-time monitoring alongside L1, actively working the alert queue during high-volume periods, while also handling escalations from L1 analysts
• Act as the primary escalation point for all L1-escalated alerts and incidents; receive and validate escalated alerts/incidents
• Perform detailed investigation, log correlation, and root-cause analysis across multiple data sources — AWS, Kubernetes, Cloudflare, Azure logs, Defender
• Write and run OpenSearch Query DSL / Lucene queries directly against raw log data to pivot, correlate

What you need

• 3–5 yrs of experience
• SIEM
• Linux
• Incident response
• Python
• AWS
• Kubernetes
• B.Tech or B.E. or M.Tech

Good to have

• Cloud security
• IAM
• Azure
• SOP writing
• Elasticsearch
• Ticketing tools