Analyst III - Security Operations Center - Analyst

Take the world with you

• *Move Forward**

================

As a global tech hub, we drive innovation at an unparalleled scale. With a pioneering spirit and an influential client base, we empower our team to spark impactful change, shaping a better world for millions.

### **Analyst III \- Security Operations Center \- Analyst**

3\+ years \| Jaipur

#### **Overview:**

Leads advanced monitoring, complex investigations, and day\-to\-day oversight of SOC analysts. Ensure high quality security operations for ATS and customer environments.

#### **Primary Responsibilities:**

• Serve as escalation point for complex alerts and incidents.
• Lead incident response activities including containment and remediation.
• Conduct threat hunting and advanced analysis across SIEM, EDR, and cloud telemetry.
• Review analyst investigations for accuracy and provide coaching.
• Maintain and improve SOC runbooks, playbooks, and automation workflows.

#### **Technical Skills:**

• Advanced SIEM, EDR, and threat analysis expertise.
• Strong understanding of intrusion methods, malware behavior, and cloud log telemetry.
• Ability to lead SOC investigations and interpret complex evidence.
• Experience performing threat hunts and tuning detections.

#### **Soft Skills:**

• Strong leadership and mentorship abilities.
• Calm under pressure with strong attention to detail.
• Clear written and verbal communication.
• Customer focused mindset.

#### **Minimum Requirements:**

• 3\+ years of SOC or incident response experience.
• Experience leading investigations and coaching analysts.
• Relevant certifications such as GCIH, GCIA, CySA\+ or similar.

#### **Preferred Requirements:**

• Experience in an MSSP or multi\-tenant SOC environment.
• SOAR automation and detection tuning experience.
• Knowledge of NIST, CIS, CMMC, and SOC 2 frameworks.
• SIEM: Wazuh (Operating in both Commercial and GCC High)
• Ticketing: JIRA, ServiceNow, ServiceTrax (Internal Tool)
• Documentation: Confluence/SharePoint
• IM/Email/Meetings: MSFT Teams, Office365/Outlook
• Event Correlation: NinjaOne
• SIEM Ingestion/Customer Tooling: MSFT Defender for Cloud/Endpoint, Sentinel One, Office365, Proofpoint, and other various sources
• DarkWeb Monitoring/Intel: Kela

• *How do we foster remarkable change?**
• --------------------------------------

By hiring, celebrating and nurturing the

best talent – from all walks of life.