Sr Administrator (Support & Operations)

Job description

Security SOC Analyst - Managed Services (L2) Role Summary The Security Operations Center (SOC) Analyst - L2 is responsible for advanced security monitoring, incident investigation, threat analysis, and incident response activities. The analyst serves as the escalation point for L1 analysts, performs detailed forensic analysis of security incidents, identifies emerging threats, and drives remediation efforts to protect organizational assets. Key Responsibilities Key Responsibilities Perform detailed investigation and analysis of escalated security incidents. Conduct advanced threat analysis using SIEM, EDR/XDR, threat intelligence, and security monitoring tools. Validate, contain, and coordinate remediation of security incidents. Lead incident handling activities for medium and high-severity security events. Correlate events from multiple security tools to identify attack patterns and indicators of compromise (IOCs). Perform malware analysis, phishing investigations, and endpoint compromise assessments. Review and tune SIEM use cases, correlation rules, and detection mechanisms. Support threat hunting activities to identify hidden threats within the environment. Develop and maintain incident response playbooks and operational procedures. Provide technical guidance and mentoring to L1 analysts. Coordinate with infrastructure, network, application, and customer teams during incident investigations. Prepare incident reports, root cause analysis (RCA), and executive summaries. Participate in security assessments, purple team exercises, and incident response drills. Identify opportunities for automation and process optimization. Incident Response & Investigation Incident Handling Lifecycle Threat Detection and Analysis Malware Investigation Phishing Analysis Digital Forensics Fundamentals IOC and TTP Analysis MITRE ATT&CK; Framework Typical L2 Responsibilities in a Managed SOC Environment Analyze and respond to escalated alerts from L1. Investigate ransomware, phishing, malware, insider threat, and account compromise incidents. Create and optimize Microsoft Sentinel analytics rules and workbooks. Perform KQL-based log analysis and threat hunting. Coordinate with customers during incident response activities. Produce detailed incident reports and remediation recommendations. Support continuous improvement of SOC processes and detection capabilities. Skill Requirements Key Responsibilities Perform detailed investigation and analysis of escalated security incidents. Conduct advanced threat analysis using SIEM, EDR/XDR, threat intelligence, and security monitoring tools. Validate, contain, and coordinate remediation of security incidents. Lead incident handling activities for medium and high-severity security events. Correlate events from multiple security tools to identify attack patterns and indicators of compromise (IOCs). Perform malware analysis, phishing investigations, and endpoint compromise assessments. Review and tune SIEM use cases, correlation rules, and detection mechanisms. Support threat hunting activities to identify hidden threats within the environment. Develop and maintain incident response playbooks and operational procedures. Provide technical guidance and mentoring to L1 analysts. Coordinate with infrastructure, network, application, and customer teams during incident investigations. Prepare incident reports, root cause analysis (RCA), and executive summaries. Participate in security assessments, purple team exercises, and incident response drills. Identify opportunities for automation and process optimization. Incident Response & Investigation Incident Handling Lifecycle Threat Detection and Analysis Malware Investigation Phishing Analysis Digital Forensics Fundamentals IOC and TTP Analysis MITRE ATT&CK; Framework Typical L2 Responsibilities in a Managed SOC Environment Analyze and respond to escalated alerts from L1. Investigate ransomware, phishing, malware, insider threat, and account compromise incidents. Create and optimize Microsoft Sentinel analytics rules and workbooks. Perform KQL-based log analysis and threat hunting. Coordinate with customers during incident response activities. Produce detailed incident reports and remediation recommendations. Support continuous improvement of SOC processes and detection capabilities. Other Requirements Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider YouTube Advertising Cookies These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies. Consent to all Advertising Cookies Advertising Cookies Provider Description Enabled Google Analytics Google Analytics is a web analytics