Job Description: L2 Security Analyst – CrowdStrike (NG-SIEM, EDR & Identity)
Role Summar
yWe are looking for an L2 Security Analyst with hands-on experience in CrowdStrike NG-SIEM, EDR, and Identity Protection. The role involves monitoring, investigation, incident handling, and active coordination with the MDR team to ensure timely detection, response, and remediation of security incidents
.
Key Responsibiliti
esSecurity Monitoring & Incident Handli
- ngMonitor alerts and incidents generated from CrowdStrike NG-SIEM, Falcon EDR, and Identity Protectio
- n.Perform L2-level analysis, triage, and investigation of security alert
- s.Validate alerts escalated by MDR or L1 SOC and determine impact and severit
- y.Support containment and remediation actions as per defined playbook
s.MDR Coordinati
- onAct as the primary coordination point between internal teams and the CrowdStrike MDR tea
- m.Review MDR escalations, recommendations, and incident report
- s.Ensure MDR-provided actions are aligned with customer security policie
- s.Track incident lifecycle from detection to closure and maintain SLA complianc
e.Threat Analysis & Respon
- seAnalyze endpoint threats such as malware, ransomware, suspicious processes, and lateral movemen
- t.Investigate identity-based threats including credential abuse, privilege escalation, and anomalous login
- s.Correlate events across SIEM, EDR, and Identity platforms for contextual analysi
s.
Operations & Continuous Improvem
- entAssist in tuning detection rules and reducing false positiv
- es.Support onboarding of new data sources into NG-SI
- EM.Participate in post-incident reviews and provide recommendatio
- ns.Maintain documentation, runbooks, and incident recor
ds.
Required Skills & Experi
ence
Technical S
- killsHands-on experience with CrowdStrike Falcon EDR and NG-
- SIEM.Understanding of identity threats (AD, Azure AD / Entra ID, SSO,
- MFA).Strong knowledge of endpoint security, log analysis, and threat investiga
- tion.Familiarity with MITRE ATT&CK frame
- work.Experience working with MDR/SOC environm
ents.Exper
- ience3 - 6 years of experience in SOC operations or security monito
- ring.Prior experience in an L2 SOC Analyst
- role.Experience coordinating with external MDR or managed security provi
ders.
Education & Certifications (Pref
- erred)Bachelor's degree in Computer Science, IT, or Cyber Sec
- urity.CrowdStrike certifications (prefe
- rred).CEH, Security+, or equivalent SOC-related certifica
tions.
