SOC L2 || 5-8Yrs || Mumbai-Thane || Immediate joiners ONLY

WNS, part of Capgemini, is an Agentic AI-powered leader in intelligent operations and transformation, serving more than 700 clients across 10 industries, including Banking and Financial Services, Healthcare, Insurance, Shipping and Logistics, and Travel and Hospitality. We bring together deep domain excellence - WNS’ core differentiator - with AI-powered platforms and analytics to help businesses innovate, scale, adapt and build resilience in a world defined by disruption.Our purpose is clear: to enable lasting business value by designing intelligent, human-led solutions that deliver sustainable outcomes and a differentiated impact. With three global headquarters across four continents, operations in 13 countries, 65 delivery centers and more than 66,000 employees, WNS combines scale, expertise and execution to create meaningful, measurable impact.

5-8+ years of experience in Cyber Security Operations, SOC Monitoring, Incident Response, SIEM/SOAR administration, and Security Engineering.

Strong hands-on expertise in Palo Alto Cortex XSIAM, with primary focus on SOAR automation, orchestration, playbook development, incident management, and response automation.

Hands-on experience with Microsoft Defender for Endpoint (MDE), CrowdStrike Falcon, and CyberSixgill Threat Intelligence Platform.

Experience in security monitoring, threat detection, threat hunting, incident investigation, and response activities.

Ability to develop and optimize use cases, correlation rules, dashboards, reports, alerts, and automated workflows in XSIAM.

Experience integrating security tools, cloud services, infrastructure devices, and business applications into XSIAM/SIEM/SOAR platforms.

Strong understanding of SOC processes, Detection Engineering, Threat Intelligence, and Incident Response lifecycle.

Ability to identify and assess security risks, threats, vulnerabilities, and control gaps across networks, systems, applications, and cloud environments.

Good understanding of TCP/IP, DNS, HTTP/HTTPS, SMTP, MITRE ATT&CK framework, and modern cyber-attack techniques.

Experience working with Windows and Linux environments (CentOS/Ubuntu/RHEL).

Knowledge of security technologies including EDR/XDR, IDS/IPS, WAF, Web Proxy, and Threat Intelligence platforms.

Experience in automation and scripting using Python, PowerShell, or Shell Scripting.

Strong analytical, troubleshooting, and problem-solving skills with the ability to work independently.

Excellent written and verbal communication skills with experience interacting with clients and cross-functional teams.

Proven leadership skills with the ability to mentor and guide SOC analysts and security engineers.

Ability to prioritize tasks, meet deadlines, and drive continuous improvement initiatives.Self-motivated, proactive, and capable of managing workloads with minimal supervision.

Willingness to work in shifts and provide on-call support when required.

Bachelor's Degree, Preferred Certifications: CHFI, CEH, or equivalent cybersecurity certifications.