Soc L3

Job opening :SOC L3

Mumbai

Deep-dive investigation of escalated incidents

Conduct root cause analysis and threat containment

Coordinate with IT, DevOps, and other teams for remediation

Develop and refine incident response playbooks

Perform Event and Risk Detection (ERD) using advanced analytics

Required Skills:

Proficiency in QRadar rule creation and custom use case development

Experience with forensic tools (Wireshark, Volatility, Autopsy)

Familiarity with MITRE ATT&CK framework and threat hunting techniques

Ability to correlate events across multiple data sources

Tools & Technologies:

SIEM: IBM QRadar (custom rules, offense management)

SOAR: IBM QRadar SOAR or similar platforms

Forensics: FTK Imager, Sysinternals Suite

Threat Hunting: YARA, Sigma Rules