L3 SOC Analyst / Incident Response Analyst

Role Overview: At ProArch, a leader in IT security consulting with a presence in the US, UK, and India, we are seeking a highly skilled and technically strong L3 SOC Analyst / Incident Response Analyst to join our Security Operations Center (SOC) team. In this critical role, you will be responsible for advanced incident detection, investigation, and response to complex cybersecurity threats. Leveraging your extensive experience and expertise, you will lead incident response activities, perform deep-dive analysis, and coordinate with cross-functional teams to mitigate risks and strengthen our security posture. If you thrive in a dynamic, fast-paced environment and are passionate about defending organizations against sophisticated cyber threats, this position is ideal for you. Key Responsibilities: - Lead and support advanced security incident investigations across multiple customer environments - Perform threat triage and validation, IOC analysis, endpoint and identity investigations, email security investigations, root cause analysis, and more - Investigate and respond to various incidents such as account compromise, business email compromise, malware and ransomware activity, privilege escalation, suspicious cloud and identity-based attacks, and advanced phishing campaigns - Coordinate containment, remediation, and recovery activities with customers and internal teams - Provide detailed investigation findings, timelines, impact assessments, and response recommendations - Conduct proactive threat hunting and validation activities as needed - Design, develop, and maintain advanced detection rules across Microsoft Sentinel and Microsoft Defender XDR - Perform detection tuning, false positive reduction, behavioral baselining, and threat-based detection improvements - Design and implement SOC automation workflows using Microsoft Sentinel Playbooks, Logic Apps, and SOAR platforms - Provide hands-on operational support, investigation, tuning, administration, and engineering for various Microsoft security platforms - Support detection and response activities related to AI-orchestrated attacks, cloud-native threats, and advanced phishing campaigns - Participate in customer incident discussions, support onboarding of new environments, and collaborate closely with teams and stakeholders - Support operational improvement initiatives across SOC and DFIR functions Qualifications Required: - Bachelors Degree / Graduation in Computer Science, Information Technology, Cybersecurity, or related technical field is mandatory - 6-9 years of overall cybersecurity experience with strong hands-on experience in incident response, threat investigation, SOC operations, and detection engineering - Prior experience in MSSP environments and with SOAR platforms is preferred - Strong technical skills in Microsoft security platforms, detection engineering, automation, scripting, and SIEM operations - Relevant certifications such as Microsoft SC-200, CISSP, and Security Automation are advantageous - Soft skills including strong communication, collaboration, documentation, and problem-solving abilities are essential - Ability to work independently in a remote-first, multicultural, and fast-paced environment (Note: The additional details about the company have been omitted in this job description.) Role Overview: At ProArch, a leader in IT security consulting with a presence in the US, UK, and India, we are seeking a highly skilled and technically strong L3 SOC Analyst / Incident Response Analyst to join our Security Operations Center (SOC) team. In this critical role, you will be responsible for advanced incident detection, investigation, and response to complex cybersecurity threats. Leveraging your extensive experience and expertise, you will lead incident response activities, perform deep-dive analysis, and coordinate with cross-functional teams to mitigate risks and strengthen our security posture. If you thrive in a dynamic, fast-paced environment and are passionate about defending organizations against sophisticated cyber threats, this position is ideal for you. Key Responsibilities: - Lead and support advanced security incident investigations across multiple customer environments - Perform threat triage and validation, IOC analysis, endpoint and identity investigations, email security investigations, root cause analysis, and more - Investigate and respond to various incidents such as account compromise, business email compromise, malware and ransomware activity, privilege escalation, suspicious cloud and identity-based attacks, and advanced phishing campaigns - Coordinate containment, remediation, and recovery activities with customers and internal teams - Provide detailed investigation findings, timelines, impact assessments, and response recommendations - Conduct proactive threat hunting and validation activities as needed - Design, develop, and maintain advanced detection rules across Microsoft Sentinel and Microsoft Defender X