SOC L3 Analyst – Cybersecurity Lead

About the role

We are seeking a highly experienced Level 3 SOC Analyst to join Bosch’s dynamic Cybersecurity team in Bangalore. The role focuses on enhancing the organization’s security posture, leading incident‑response efforts, and mentoring junior analysts.

Key responsibilities

• Lead complex cybersecurity incidents from detection to resolution, including advanced malware analysis and ransomware response.
• Coordinate incident‑response activities with internal teams and external partners.
• Develop and maintain incident‑response playbooks, procedures, and runbooks.
• Operate and optimise cloud‑native SIEM platforms (AWS GuardDuty, Azure Sentinel, GCP) for threat detection and correlation.
• Develop, tune, and maintain SIEM rules, alerts, and dashboards.
• Evaluate and integrate SOAR platforms for automated remediation.
• Perform proactive threat hunting based on threat‑intel and adversary TTPs.
• Support audits by preparing technical evidence and documentation.

Required profile

• 10+ years progressive cybersecurity experience, with at least 5 years as a Level 3 SOC Analyst or Incident‑Response Lead.
• Proven track record leading digital forensics and incident response for complex attacks.
• Extensive hands‑on experience with cloud‑native SIEM platforms and traditional SIEMs (e.g., Splunk).
• Exposure to vulnerability management, application security testing, and GDPR compliance.

Required skills

• Microsoft Defender, Azure Sentinel, AWS GuardDuty, GCP security services.
• PowerShell and Python scripting for automation and analysis.
• Metasploit, Kali Linux, Mimikatz for application security testing.
• EDR solutions and SOAR platforms.
• SIEM rule creation, alert tuning, and dashboard development.