Innovate in Bengaluru

This position is based at our on-site office in Bengaluru. Lowe's offers an ultramodern work environment, complete with cutting-edge technology, collaborative workspaces, an on-site gym and clinic, and other perks to enhance your work experience.?

About Lowe's

Lowe's Companies, Inc. (NYSE: LOW) is a FORTUNE 50 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year 2024 sales of more than $83 billion, Lowe's operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowe's supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts and providing disaster relief to communities in need. For more information, visit Lowes.com.

Job Summary

SOC Senior Analyst, specializing in threat hunting and cyber threat intelligence (CTI). Adept at detecting advanced adversary activity, uncovering stealthy tactics, and transforming raw intelligence into actionable defense strategies. Proficient in SIEM, EDR/XDR, malware analysis, and intelligence frameworks. Recognized for strong analytical skills, incident response leadership, and mentoring junior analysts.

The primary purpose of this role is to lead the implementation and ongoing delivery of information security tools and processes. This includes responsibility for creating, executing, and improving processes and procedures with limited direct guidance from more senior level security associates. This role solves complex problems while creating and optimizing processes and often takes a lead role in implementing new services and technologies. This role requires a strong understanding of most tools and processes supported by the team, including many of the key integration points with other parts of technology, works mostly independently, and provides coaching and direction to more junior level associates.

SOC Senior Analyst, specializing in threat hunting and cyber threat intelligence (CTI). Adept at detecting advanced adversary activity, uncovering stealthy tactics, and transforming raw intelligence into actionable defense strategies. Proficient in SIEM, EDR/XDR, malware analysis, and intelligence frameworks. Recognized for strong analytical skills, incident response leadership, and mentoring junior analysts.

What You Will Do

Threat Hunting: Hypothesis-driven hunts leveraging MITRE ATT&CK, anomaly detection, and custom detection rules.
Threat Intelligence: Collection, analysis, and operationalization of intel; tracking adversary TTPs; producing reports and advisories.
Incident Response: Lead triage, containment, and eradication of complex incidents; root cause analysis and documentation.
Detection Engineering: Develop Sigma/YARA rules, KQL/SPL queries, and enrichment scripts.
Collaboration: Work with Red Team, and intel-sharing communities; mentor junior analysts.

Minimum Qualifications

4 years of experience in information security
Bachelor's degree in computer science, computer information systems, engineering, business administration, cybersecurity, or related field

Core Responsibilities

Threat Hunting:

Conduct hypothesis-driven and intelligence-led threat hunts across enterprise environments.
Identify hidden adversary tactics, techniques, and procedures (TTPs) leveraging MITRE ATT&CK.
Develop custom detection use cases, scripts, and queries (e.g., Splunk, Elastic, Sentinel).

Threat Intelligence

Collect, analyze, and operationalize threat intel from internal and external sources.
Track adversary groups, campaigns, and emerging malware families.
Enrich SIEM/SOAR detections with CTI feeds and IOCs.
Produce intel reports and threat advisories for leadership and SOC teams.

SOC Operations & Incident Response

Lead triage and investigation of high-severity incidents.
Coordinate with IR teams to contain and eradicate advanced threats.
Perform root cause analysis and document lessons learned.
Collaboration & Mentoring:
Partner with Red Team to enhance detection coverage.
Mentor junior analysts in hunting techniques, malware basics, and intel tradecraft.

Preventive & Forward-Looking Edge

Build custom threat hunting playbooks to stay ahead of adversaries.
Integrate AI/ML-assisted detection to reduce false positives.
Continually map detection coverage against MITRE ATT&CK gaps.

Preferred Skills/Education

IT experience in the retail industry
SIEM: Splunk, ELK/Elastic, Microsoft Sentinel
EDR/XDR: CrowdStrike, Carbon Black, Defender for Endpoint
Threat Hunting: YARA rules, Sigma, custom queries (KQL, SPL)
CTI Tools: MISP, ThreatConnect, Anomaly, Recorded Future
Scripting: Python, PowerShell, Bash (for automation & data enrichment)
Networking & Protocols: TCP/IP, HTTP/S, DNS, SMTP, SSL/TLS
Malware & Forensics: Static/Dynamic analysis, sandboxing, memory forensics (Volatility, Redline)
GIAC Cyber Threat Intelligence (GCTI)
SANS Threat Hunting & IR (GCFA / GREM optional for forensics/malware)
Certified Threat Intelligence Analyst (CTIA EC-Council)
Certified Information Systems Security Professional (CISSP)
GIAC Certified Incident Handler (GCIH)
Certified Ethical Hacker (CEH)
GIAC Penetration Tester Certification (GPEN)
Practical Network Penetration Tester (PNPT)
eLearnSecurity Certified Professional Penetration Tester (eCPPT)
CompTIA Security+ Certification
CompTIA PenTest+ Certification
Or other relevant information security certifications

Lowe's is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.

Starting rate of pay may vary based on factors including, but not limited to, position offered, location, education, training, and/or experience. For information regarding our benefit programs and eligibility, please visit https://talent.lowes.com/us/en/benefits.

Sr Security Operations Center (SOC) Analyst

Security Operations Centre (SOC) Analyst

Senior SOC Analyst

Senior Level - SOC Detection Analyst

Sr Analyst, Information Security, SOC