SOC L2/L3

Greetings from TCS!

- Role: SOC L2/L3

- Experience: 6 to 15 Years

- Drive Locations: Bangalore/Kolkata

Interview Mode: In-Person Drive

Date: 29-Aug-2026

Job Description

- Strong understanding and Hands on experience of SOC operations, incident response, and cyber kill chain methodologies.

- Familiarity with other SIEM solutions (Splunk, QRadar, Azure Sentinel, etc.) as an add-on capability.

- Knowledge of MITRE ATT&CK, threat intelligence, and detection engineering principles.

- Proficiency in scripting (Python, PowerShell, or similar) for automation and data enrichment.

- Experience with EDR, NDR, and IAM integrations within the SIEM ecosystem.

- Excellent analytical, communication, and documentation skills.

- Incident Analysis & Response: Ability to analyze security alerts, investigate incidents, perform root cause analysis, and recommend mitigation actions using SIEM tools (e.g., Splunk, QRadar, ArcSight).

- Threat Intelligence Correlation: Good understanding of threat intelligence sources and ability to correlate threat indicators (IOCs, TTPs) to detect potential security threats or advanced attacks.

- Firewall, IDS/IPS, and Endpoint Security Management: Hands-on experience in monitoring, tuning, and analysis level experience in Firewalls, IDS/IPS, and Endpoint Detection & Response (EDR) solutions.

- Log Analysis & Forensics: Proficiency in analyzing logs from servers, network devices, and security appliances to detect anomalous activities and support forensic investigations.

- Ticketing & Escalation Process: Strong understanding of ITSM processes (e.g., using ServiceNow) for incident tracking, documenting findings, escalating complex issues to L3 or relevant teams, and driving incidents to closure.

Thanks & Regards

Sindhuja Polisetty

HR TAG Cyber Security

Tata Consultancy Services