SOC Level 3 Implementation Engineer/Analyst

About Position:As a SOC L3 Analyst, you will be responsible for leading the investigation and response to complex security incidents, engineering advanced detection content, and optimizing security tools and processes. With a strong focus on Splunk, content engineering, Endpoint Detection and Response (EDR), and Security Orchestration, Automation, and Response (SOAR), you will enhance the SOC's capabilities to detect and mitigate advanced cyber threats. Collaborate with other SOC analysts, threat intelligence teams, and IT departments to improve overall security posture. Provide mentorship and guidance to L1 and L2 analysts, sharing knowledge and best practices.Role: SOC Level 3 Implementation Engineer/AnalystLocation: Pune/ HyderabadExperience: 8 Years – 11 YearsJob Type: Full Time EmploymentNote: Working Conditions: This role requires working in shifts to provide 24/7 security monitoring.What You'll Do:Advanced Incident Response:Security Solution Design and ArchitectureCollaborate with stakeholders to understand business requirements and define the architecture and design of security solutions within the SOC.Actively participate in Technical Table Top Drills (internal and external).Actively participate in Incident Response bridge calls.Develop comprehensive security architecture blueprints, SOC Maturity, defense-in-depth strategies.Experience with security technologies and tools, such as QRadar, Splunk, SumoLogic, Palo Alto SIEM & SOAR, CrowdStrike & SentinelOne EDR, and endpoint protection platforms.Technology Evaluation and SelectionEvaluate and recommend security technologies, products, and vendors based on organizational needs, industry best practices, and emerging threats.Conduct proof-of-concept (POC) evaluations to assess the performance, functionality, and suitability of security solutions for deployment within the SOC environment.Security Solution ImplementationLead the implementation and deployment of security technologies SIEM and SOAR and solutions within the SOC, ensuring adherence to design specifications and security standards.Configure and customize security products and tools to align with organizational requirements and operational workflows.Coordinate with cross-functional teams, including network engineering, system administration, and application development, to facilitate smooth deployment and integration.Process Development and OptimizationDefine and document security processes, procedures, and workflows within the SOC, including incident detection, response, and remediation.Implement automation and orchestration capabilities to streamline SOC operations and improve response times to security incidents.Continuously assess and optimize security processes to enhance efficiency, effectiveness, and scalability.Security Tool Management and AdministrationAdminister and maintain security monitoring and detection tools deployed within the SOC environment, such as SIEM (Security Information and Event Management), SOAR and EDR (Endpoint Detection and Response) platforms.Perform routine maintenance tasks, including software updates, patch management, and configuration changes, to ensure the reliability and performance of security tools.Troubleshoot and resolve technical issues related to security tools and infrastructure, collaborating with vendors and support teams as needed.Log Source integration and its troubleshooting.Documentation and Knowledge TransferPrepare RCA for P1 and P2 Security Incidents.Maintain comprehensive documentation of implemented security solutions, configurations, and processes, including design documents, deployment guides, and standard operating procedures (SOPs).Provide training and knowledge