SOC Senior Analyst

The SOC Senior Analyst / Incident Response Specialist is a senior-level cybersecurity expert responsible for advanced incident investigation, threat hunting, digital forensic analysis, and incident response leadership within HCLTech s managed Security Operations Center (SOC) MDR model. This role is pivotal in defending customer environments from evolving cyber threats, ensuring robust detection coverage, and mentoring the next generation of cyber defenders, thus directly contributing to the organization s security posture and client trust.

Key Responsibilities

• Lead deep-dive investigations of escalated security incidents, reconstructing attack chains and correlating multi-source telemetry.
• Execute forensic triage of hosts, memory, disks, and logs, preserving evidence and providing comprehensive analysis for legal or regulatory needs.
• Design and conduct hypothesis-driven and intelligence-led threat hunts using frameworks such as MITRE ATT&CK.
• Act as incident commander for high-severity events, coordinating containment, eradication, and recovery efforts with customer and internal teams.
• Develop and tune SIEM/EDR/XDR detections, authoring advanced use cases that improve detection efficacy and reduce false positives.
• Define, review, and validate SOAR (Security Orchestration, Automation, and Response) playbooks and automation workflows.
• Integrate threat intelligence into SOC operations, contextualizing incidents and managing the IOC lifecycle.
• Produce detailed root-cause analysis and lessons-learned reports, driving continuous improvement in detection and response processes.
• Audit L1/L2 analyst work, provide targeted coaching, and uphold quality assurance standards across the SOC.
• Mentor junior analysts, deliver knowledge transfer sessions, and contribute to internal training and capability building.
• Represent the SOC in customer governance and post-incident review forums, presenting incident trends and improvement actions.
• Participate in adversary emulation and purple-team exercises, translating findings into actionable detection and response enhancements.