SOC Analyst L2

Job Description - SOC Analyst – L2 (Senior)

About QuadGen Wireless Solutions:

QuadGen Wireless Solutions Pvt. Ltd. is a telecom technology and engineering company, with strong expertise in Wireless, IP, Cloud, Data Center and 4G/5G Core technologies. QuadGen is expanding into Cybersecurity line of business, with a strategic focus on building Managed SOC services, SOC implementation for the BFSI (Banking, Financial Services & Insurance) and PSU, Enterprise, Telecom & Networking domains.

About the Role:

Responsible for advanced security monitoring, incident investigation, threat analysis, detection engineering, and escalation management while providing technical guidance to L1 SOC Analysts.

Key Responsibilities:

• Perform advanced investigation of SIEM alerts and security incidents across endpoint, network, server, application, identity, and cloud environments.
• Analyze and correlate security events from multiple log sources to determine attack patterns, incident scope, severity, and potential impact.
• Investigate suspicious activities using SIEM, EDR/XDR, NDR, threat intelligence, sandboxing, and other security technologies.
• Perform detailed IOC analysis, event correlation, attack-chain analysis, and MITRE ATT&CK mapping during investigations.
• Lead investigation of incidents escalated by L1 and recommend appropriate containment, remediation, and recovery actions.
• Conduct proactive threat hunting using security telemetry, threat intelligence, behavioral indicators, and known attacker TTPs.
• Develop, review, and tune SIEM correlation rules, detection use cases, dashboards, alerts, and monitoring logic.
• Coordinate with Incident Response, infrastructure, network, endpoint, cloud, and application teams for investigation and remediation.
• Mentor and provide technical guidance to L1 SOC Analysts, including review of escalated alerts and investigation quality.
• Support SOC Manager in KPI/SLA reporting, major incident reviews, threat advisories, and continuous SOC improvement.

Required Skills:

• 5+ years of cybersecurity/SOC experience with strong hands-on SIEM and incident investigation exposure.
• Strong knowledge of SIEM, EDR/XDR, NDR, threat intelligence, IDS/IPS, firewalls, email security, and endpoint security.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, Active Directory, Windows/Linux, authentication, and network security.
• Experience in incident triage, threat hunting, IOC analysis, log correlation, and root-cause investigation.
• Good understanding of MITRE ATT&CK, Cyber Kill Chain, malware behavior, attacker TTPs, and incident response lifecycle.
• Strong analytical, troubleshooting, documentation, and communication skills.