{"id":2954915,"url":"https://alion.io/job/larsen-toubro-soc-engineer-l2","title":"SOC Engineer (L2)","company":{"id":2124,"name":"Larsen & Toubro","domain":"larsentoubro.com","url":"https://alion.io/company/larsentoubro","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":80,"open_postings":23,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":13,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Hardware","role_family":"Hardware","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15000,"max_usd":35000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":775},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Clair","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CUDA","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"HashiCorp Boundary","optional":false},{"name":"IAM","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Trivy","optional":false},{"name":"Vault","optional":false}],"status":"live","first_seen_at":"2026-10-07T00:00:00Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-22T10:28:31Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Job Purpose\nThe SOC L2 Analyst performs advanced investigation and response activities, conducts threat analysis, and supports containment and remediation of cybersecurity incidents. Protect multi?tenant GPU cloud with defense?in?depth, ensuring zero?trust, auditability, and regulatory alignment.\nRole Description\nKey Responsibilities\nInvestigate escalated incidents from L1 analysts. \nConduct detailed log analysis and threat hunting activities. \nPerform malware analysis and forensic investigations. \nExecute containment, eradication, and recovery procedures. \nCorrelate events across multiple security platforms. \nDevelop detection use cases and SIEM/SOAR correlation rules. \nInvestigate Kubernetes, container runtime, and cloud-native security incidents.\nFine-tune security controls to reduce false positives. \nLead incident response activities and root cause analysis. \nCollaborate with infrastructure, cloud, and application teams during investigations. \nAssist Vulnerability Management teams in validating exploitable vulnerabilities and prioritizing remediation.\nProvide mentoring and guidance to L1 analysts.\nImplementation Enforce IAM/RBAC, least privilege, and network micro?segmentation; secrets/KMS integration.\nDefine secure baselines for OS, containers, CUDA drivers, and platform services; supply?chain controls (image signing/SBOM).\nImplement and maintain cloud network security controls such as security groups, firewalls, WAF, DDoS, micro-segmentation, EDR, DLP, PIM/PAM and secure connectivity etc\n\nOperations Continuous vulnerability management, patch cadence, threat detection (EDR/XDR), and audit log integrity, PAM, DDOS, Firewalls & WAF\nPeriodic access reviews, key rotation, and compliance evidence packs.\n\n Reliability & Incident Incident response (containment/forensics/eradication); purple?team exercises; tabletop drills.\n\nData Protection Encryption in?transit/at?rest, tenant isolation boundaries, data retention, legal holds, and purge workflows.\n\nExperience & Educational Requirements\nQualifications and Experience\nEDUCATIONAL QUALIFICATIONS: (degree, training, or certification required)\nBE/B-Tech or equivalent with Computer Science or Electronics & Communication\nRELEVANT EXPERIENCE: (no. of years of technical, functional, and/or leadership experience or specific exposure required)\n4-7 years cybersecurity; strong cloud security, zero?trust, and data privacy in regulated environments.\nStrong expertise in SIEM technologies (Microsoft Sentinel, Splunk, QRadar). \nHands-on experience with Microsoft Defender XDR, CrowdStrike, Sentinel One, or similar EDR tools. \nKnowledge of Azure, AWS, and GCP security monitoring. \nExperience in incident response and digital forensics. \nUnderstanding of attack techniques, malware behaviour, and threat actor tactics. \nAbility to analyze packet captures and network traffic. \nKnowledge of SOAR platforms and automation workflows. \nExperience with KQL, Python Scripts, or equivalent query languages.\nParticipate in shift-based 24x7 SOC operations\nTools / Tech\nSIEM (Splunk/ELK), EDR/XDR, image scanners (Trivy/Clair), OPA/Gatekeeper, Vault/KMS/HSM, HashiCorp Boundary (or equivalent), Firewalls, WAF, DDOS, ISO AUDITS, VAM, PAM.\nCertifications\nCISSP; CISM/CISA; CCSP; ISO 27001 Lead Implementer/Auditor, SC-200, SC-300, AZ-500, GCIH, GCIA, CEH, CompTIA CySA+\nKPIs\nMean time to detect/respond, vulnerability backlog burn?down, audit non?conformities, policy violation rate,False Positive Reduction Rate,Automation Coverage (SOAR Playbooks).","description_format":"text","description_chars":3513,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Civil & Structural Engineering","Engineering Services","Construction"],"lifecycle":[{"event":"open","at":"2026-10-20T21:13:39Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.52,"p_room":0.55,"age_days":15,"expected_fill_days":13,"reasons":["conf:2","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/larsen-toubro-soc-engineer-l2","json_url":"https://alion.io/job/larsen-toubro-soc-engineer-l2.json","meta":{"generated_at":"2026-10-22T10:49:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8249,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2124},"rest":"https://alion.io/mcp/rest/get_company?id=2124"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flarsen-toubro-soc-engineer-l2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flarsen-toubro-soc-engineer-l2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flarsen-toubro-soc-engineer-l2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/larsen-toubro-soc-engineer-l2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flarsen-toubro-soc-engineer-l2"}]}