SOC L2 Engineer – Immediate Joiners – Mumbai/Thane

About the role

We are looking for an experienced SOC L2 Engineer to join our security operations team in Mumbai/Thane. The role focuses on advanced monitoring, incident response and automation using Palo Alto Cortex XSIAM and other leading security platforms.

Key responsibilities

• Monitor security events and manage incidents across Windows and Linux environments.
• Develop, tune and maintain detection use cases, correlation rules, dashboards and alerts in XSIAM/SIEM/SOAR.
• Design and implement SOAR playbooks for automated response, integrating tools such as Microsoft Defender for Endpoint, CrowdStrike Falcon and CyberSixgill.
• Conduct threat hunting, investigation and remediation activities following the MITRE ATT&CK framework.
• Collaborate with cross‑functional teams to integrate new security tools, cloud services and business applications.
• Mentor junior SOC analysts and contribute to continuous improvement of SOC processes.

Required profile

• 5‑8 years of hands‑on experience in cyber security operations, SOC monitoring and incident response.
• Strong knowledge of TCP/IP, DNS, HTTP/HTTPS, SMTP and modern attack techniques.
• Experience working with Windows and Linux (CentOS/Ubuntu/RHEL) systems.
• Excellent communication skills and ability to work independently in shift‑based schedules.

Required skills

• Palo Alto Cortex XSIAM (SOAR automation, playbook development)
• Microsoft Defender for Endpoint, CrowdStrike Falcon, CyberSixgill Threat Intelligence Platform
• SIEM/SOAR administration, use‑case development, correlation rule creation
• EDR/XDR, IDS/IPS, WAF, Web Proxy, Threat Intelligence platforms
• Python, PowerShell or Shell scripting