Security Architect

As an L3 Incident Response Analyst in a 24x7 SOC, you will be the primary escalation point for complex and high-severity security incidents. You will lead technical handling, deep-dive analysis, root cause investigation, and forensics using tools like SentinelOne and Splunk SIEM. This role requires expertise in detection, investigation, containment, and remediation, with collaboration across security, IT, and compliance teams.

• Lead end-to-end incident response lifecycle
• Subject matter expert for high-severity incidents
• Develop and implement automation for SIEM
• Perform deep-dive EDR analysis and threat hunting
• Proficient in Python, PowerShell, and Splunk SPL
• Cloud incident handling in AWS and Azure