2,163,220open jobs
139,131companies
240,217added this week
Browse all
Location
In office (Sofia)
Visa
Sponsors visas in Ireland; no register of this country names it

First seen by Alion on Nov 10, 2026.

Overview
Company
Impact
Profile match
HCLTech is an Indian information technology services and consulting company headquartered in Noida, Uttar Pradesh. Its roots lie in HCL, founded in 1976 by Shiv Nadar and partners, and the IT services business was set up as a separate company in 1991. It provides application development and maintenance, infrastructure and cloud services, cybersecurity, engineering and R&D services, and sells its own software products through HCLSoftware. The company employs more than 200,000 people in some 60 countries and is listed on the Indian stock exchanges.

HCLTech is a global technology company, home to more than 226,000+ people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending December 2025 totaled $14.5 billion. At HCLTech, you’ll supercharge your potential. You’ll find your career. And you’ll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

Job Summary:

We are seeking a dedicated and highly skilled Level 2 Security Analyst to join our dynamic security team. The successful candidate will be responsible for real-time monitoring, investigation, and response to identity-based and endpoint security threats using Microsoft Defender for Endpoint (MDE). This role demands 24/7 support coverage and close collaboration with global security teams to ensure rapid threat detection, containment, and remediation within a fast-paced environment.

Key Responsibilities:

  • Perform continuous monitoring, detection, and analysis of security alerts across identity, endpoint, and network environments.
  • Investigate security incidents with a focus on false positives, alert validation, and root cause analysis to minimize risk exposure.
  • Collaborate with global security operations teams to coordinate threat containment, remediation strategies, and post-incident analysis.
  • Utilize SIEM platforms effectively to identify, analyze, and escalate potential threats; refine detection rules and use cases based on trending and feedback insights.
  • Conduct advanced event triage, log analysis, and threat hunting activities to uncover complex security threats.
  • Generate detailed incident reports, monthly trend analyses, and security summaries to inform stakeholders and drive continuous improvement.
  • Support and enhance SIEM and EDR tool configurations, detection content, and incident workflows.
  • Provide expert-level feedback to detection engineering teams to optimize security content and improve detection accuracy.
  • Maintain up-to-date knowledge of emerging threats, attack techniques, and industry best practices, including familiarity with frameworks such as MITRE ATT&CK.
  • Foster a proactive security culture by recommending and implementing threat mitigation and prevention strategies based on lessons learned.

Candidate Profile:

  • Extensive hands-on experience managing complex network environments and security infrastructures.
  • Proven expertise in continuous SIEM monitoring, alert validation, and cross-source event correlation.
  • Strong analytical skills, with the ability to enhance detection logic, reduce false positives, and improve operational efficiency.
  • Experience with various SIEM tools, EDR platforms, IDS systems, and network security roles.
  • Familiarity with threat intelligence frameworks such as MITRE ATT&CK and threat hunting methodologies.
  • Knowledge of network, system, and endpoint security disciplines, combined with incident response capabilities.
  • Demonstrated ability to produce comprehensive security reports, including trending and incident summaries.
  • Self-motivated, proactive, and innovative with excellent teamwork and communication skills.
  • Willingness to work in a 24/7 operational environment, including occasional travel as required.

Soft Skills:

  • Excellent verbal and written communication skills, capable of articulating technical findings to both technical and non-technical audiences.
  • Strong analytical mindset with a continuous improvement approach.
  • Client-facing presentation skills for technical analysis reports and security briefings.
  • Adaptability to shift work and collaborative in cross-functional team settings.

What we offer:

  • Food vouchers and social benefits package
  • Opportunity for career progression
  • Young and vibrant team environment
  • Competitive salary and performance bonuses
  • Professional on-boarding and on-going trainings

 

Are you willing to build up your career with us? – We’ll be happy to receive your resume in English!

*Your personal data is secure with us.

** Only candidates selected for interview will be contacted

HCLTech is committed to protecting and securing the privacy and confidentiality of the Personal Data which it collects directly or indirectly from you when applying for a job at HCLTech either directly or through a third-party human resources agency. This notice (the “Notice”) outlines and explains how HCL Technologies Limited including its subsidiaries, local employing entities, associates, and affiliated companies [collectively referred to as “HCLTech”, “us,” “our”, or “we”] will process your Personal Data in accordance with applicable privacy legislation(s).

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
2,163,220 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Sofia
In office · Sofia
Python
DevOps
Splunk
GCP
AWS
Windows
Cybersecurity
Okta
Zero Trust
SIEM
Apply
$56k per year · Hybrid · Sofia
Python
Java
PHP
C#
C++
C#
ASP.NET Core
Management
Agile
Apply
Hybrid · Full-Time · Auckland
Cybersecurity
SIEM
Apply
In office · Lieshout
SQL
DevOps
Zabbix
VMWare
Hyper-V
VLAN
Wi-Fi
Cybersecurity
Wireshark
Apply
In office · Sofia
Python
DevOps
Splunk
GCP
AWS
Windows
Cybersecurity
Okta
Zero Trust
SIEM
Apply
≈ $64k – $147k per year (Estimated) · Hybrid · London · Sofia
Python
AI/ML
LLM
DevOps
Splunk
Terraform
CloudFormation
CI/CD
AWS
Kubernetes
GitHub
Cybersecurity
SIEM
Management
Agile
Scrum
Apply
≈ $85k – $156k per year (Estimated) · Hybrid · London · Sofia
Python
DevOps
Splunk
Terraform
CloudFormation
CI/CD
AWS
GitHub
Cybersecurity
SIEM
Management
Agile
Scrum
MedTech
Design Controls
Apply
Remote (Bulgaria, Serbia, Armenia) · Contractor · Tirana · Sofia · Belgrade · Skopje · Yerevan
Management
Jira
Apply
People Coordinator 1 day ago
Hybrid · Full-Time · 1+ year exp · Bachelor's Degree · Sofia
Apply
See all jobs
This is one of many
2,163,220 more open roles from verified company boards, updated every day.