Analog Devices
Bengaluru, Karnataka, India Posted 4d ago
The L3 SOC Analyst is the senior technical escalation point within the Security Operations Centre (SOC) at Analog Devices, responsible for leading complex cyber investigations, incident response, and driving continuous improvement.
Key Responsibilities
Act as the primary technical escalation point for high-severity and complex cyber incidents.
Lead investigations involving ransomware, business email compromise, insider threats, cloud compromise, identity attacks, and advanced persistent threats.
Perform detailed scoping, root-cause analysis, containment, eradication, and recovery activities during active incidents.
Provide incident command support and coordinate response activities across Cybersecurity, IT, Legal, HR, Privacy, and business stakeholders.
Conduct proactive threat hunting using intelligence, behavioural analytics, SIEM, EDR, NDR, identity, and cloud telemetry.
Collect, analyse, operationalise, and disseminate cyber threat intelligence from internal and external sources.
Track threat actor tactics, techniques, and procedures (TTPs) and map activity to MITRE ATT&CK.
Develop, tune, and improve detection use cases, correlation rules, analytics, and automated response workflows.
Own and maintain SOC playbooks, incident response procedures, escalation criteria, and communication templates.
Provide coaching, mentorship, and quality oversight for L1 and L2 analysts.
Review alert triage quality, escalation decisions, documentation standards, and investigation outcomes.
Produce executive-ready incident summaries, threat assessments, lessons learned, and risk-based recommendations.
Drive continuous improvement activities including post-incident reviews, threat modelling, detection coverage reviews, and operational readiness exercises.
Support compliance, audit, and regulatory activities including NIST CSF, CMMC, TISAX, and incident response evidence requirements.
Maintain flexibility to support global cybersecurity operations, including participation in management meetings, vendor engagements, support calls, incident response activities, and after-hours escalations across multiple time zones as needed.
Requirements
5+ years of experience in SOC Operations, Incident Response, Threat Intelligence, Digital Forensics, Detection Engineering, or related cybersecurity disciplines.
Advanced understanding of cyber attack methodologies, adversary behaviour, and incident response frameworks.
Strong experience with SIEM, EDR, NDR, email security, identity security, and cloud security platforms.
Experience leading complex investigations and coordinating response activities across multiple teams.
Strong analytical, investigative, and decision-making skills.
Preferred Qualifications
GCIH, GCIA, GCTI, CISSP, GCFA, GREM, CEH or equivalent certifications.
Experience with Microsoft Defender, WIZ, SIEM/SOAR platforms, and cloud-native security tools.
Experience within a global enterprise SOC or regulated environment.
Experience leveraging AI, generative AI, and agentic security capabilities to enhance threat detection, investigation, response, and SOC operational efficiency.
Scripting and automation experience using Python, PowerShell, or similar languages.
