SOC Analyst L2 – IBM QRadar & CrowdStrike

We are looking for an experienced SOC Analyst L2 with proficient hands-on expertise in IBM QRadar, CrowdStrike, and SOC operations. The role will focus on monitoring, investigating, and responding to cybersecurity incidents, serving as an escalation point for L1 analysts and supporting effective incident containment, remediation, documentation, and closure.

Key Responsibilities

Monitor, analyze, and investigate security s using IBM QRadar and CrowdStrike.

Perform L2-level SOC investigations for incidents escalated by L1 analysts.

Correlate security events and logs to identify suspicious activity, indicators of compromise, and potential security incidents.

Determine incident scope, severity, business impact, root cause, and attack vector.

Identify true positives, false positives, and potentially malicious activities.

Investigate endpoint security incidents using CrowdStrike, including process activity, file and hash information, persistence indicators, and endpoint telemetry.

Use IBM QRadar for security-event analysis, correlation, investigation, and incident monitoring.

Support incident containment, eradication, remediation, recovery, and closure activities.

Maintain detailed investigation notes, incident timelines, evidence, reports, and audit records.

Ensure effective handover of open security incidents between shifts.

Prepare incident summaries and communicate findings, risks, and remediation recommendations to relevant stakeholders.

Guide L1 SOC analysts on triage, security investigations, and incident-handling procedures.

Contribute to SOC procedures, knowledge documentation, and continuous process improvements.

Support 24x7 rotational shifts, including weekends and public holidays where required.