SOC Threat Hunting & Advanced Analysis

The Tier 3 SOC Analyst is the senior technical authority on the analysis floor at Codec Networks Pvt. Ltd. The role combines proactive, hypothesis-driven threat hunting with deep investigation of the most complex, novel or high-impact incidents escalated from Tier 2. The T3 analyst develops and validates detection logic, reconstructs sophisticated attack chains, reverse-engineers suspicious behaviour, operationalises threat intelligence into hunts, and mentors T1/T2 analysts. Working primarily on a day pattern with on-call coverage, the role requires expert command of SIEM, EDR and network forensics, strong scripting ability, and the maturity to drive improvements to the SOC's detection posture and playbooks. Position Details Reports To Shift Lead / SOC Manager Direct Reports None Department Security Operations Centre (SOC) Codec Networks Pvt. Ltd. Employment Type Full-time Work Pattern 247365 rotating shifts, including nights, weekends, and public holidays. Location / Work Mode Delhi/Gurugram On-site at the SOC facility. Shift-based role; remote work is not available for Tier 1 (SOC Analyst L1). Seniority Entry Level (Grade: SOC-1) Indicative CTC (INR) As per industry best standards. Technical Skills Threat Hunting Specific Skills Required: Hypothesis-driven hunting, behavioural analytics, anomaly detection Proficiency Level: Expert Malware Analysis Specific Skills Required: Full static/dynamic analysis, reverse engineering, C2 identification Proficiency Level: Expert MITRE ATT&CK Specific Skills Required: Advanced TTP correlation, adversary emulation, detection gap analysis Proficiency Level: Expert Scripting / Automation Specific Skills Required: Python, PowerShell, YARA rules, Sigma rules development Proficiency Level: Advanced Memory Forensics Specific Skills Required: Volatility, WinPmem, memory artefact extraction and analysis Proficiency Level: Advanced Threat Intelligence Specific Skills Required: Intelligence integration into hunt hypotheses, adversary profiling Proficiency Level: Advanced Detection Engineering Specific Skills Required: Writing SIEM detection rules (SPL/KQL), tuning correlation logic Proficiency Level: Advanced Purple Team Specific Skills Required: Adversary emulation, Atomic Red Team, attack simulation coordination Proficiency Level: Intermediate Soft Skills Attention to detail and pattern recognition under high alert volumeClear and concise written documentation skillsAbility to remain calm and focused during high-pressure P1 situationsEffective shift handover communicationWillingness to escalate early rather than over-investigate at T1 level Soft Personality Attributes Conscientious & consistent brings the same diligence to alert #500 as to alert #1.Calm under pressure stays composed during alert storms and P1 escalations.Detail-oriented notices the small anomaly others scroll past.Dependable & punctual reliable shift attendance is critical to 247 cover.Humble & coachable escalates early rather than over-reaching, and acts on feedback.Genuinely curious interested in how attacks work and eager to grow. Technical Deliverables Triaged Alert Tickets Description: Fully triaged, classified, and documented alert tickets in the ITSM tool with severity, asset context, and rationale. Cadence: Every shift Escalation Handover Notes Description: Structured escalation packages for Tier 2 (T2) containing IOCs, enrichment details, and initial findings. Cadence: Per confirmed true positive Shift Handover Report Description: Written handover covering open alerts, .