Hiring SOC Investigation Specialist on behalf of high-growth technology and enterprise partners building next-generation SOC automation and AI-driven investigation systems. This role is ideal for experienced SOC analysts who can apply real-world investigative judgment to review, validate, and construct high-quality security investigations across SIEM, endpoint, cloud, and identity environments.

Responsibilities

Review, monitor, and evaluate SOC alerts and investigation outputs based on predefined scenarios and criteria.
Distinguish true positives from false positives by validating investigative evidence and alert context.
Perform end-to-end security investigations when required, including log analysis, entity pivoting, timeline reconstruction, and evidence correlation.
Assess the correctness, completeness, and quality of SOC investigations produced by automated or human workflows.
Apply consistent investigative judgment while recognizing that multiple valid investigation paths may exist for the same alert.
Make clear binary determinations (e.g., ACCEPT / PASS) while also producing detailed ground-truth investigations when required.
Use Splunk extensively to pivot across logs, entities, and timelines, including reading and reasoning about SPL queries.
Maintain clear and accurate documentation of investigative steps, assumptions, evidence, and conclusions.
Collaborate with program leads and other expert annotators to uphold high-quality investigation and annotation standards.
Mentor or support other analysts where applicable, particularly in long-term or lead annotator roles.

Requirements

3+ years of hands-on experience as a SOC analyst in a production SOC environment (Tier 2 or above strongly preferred).
Strong understanding of alert triage, incident investigation workflows, and evidence-based decision-making under time constraints.
Mandatory hands-on experience with Splunk, including:
Conducting investigations using Splunk
Reading, understanding, and reasoning about SPL queries
Pivoting between logs, entities, and timelines
Proven ability to evaluate SOC investigations and determine whether conclusions are valid, incomplete, or incorrect.
Strong investigative judgment and comfort making decisive evaluations.
Fluent English (written and spoken) with strong documentation and communication skills.

Nice to Have

Experience with Endpoint Detection & Response (EDR) tools such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or SentinelOne.
Experience analyzing cloud security logs and signals:
AWS (CloudTrail, GuardDuty)
Azure (Activity Log, Defender for Cloud)
GCP (Cloud Audit Logs)
Familiarity with Identity & Access Management platforms such as Okta Identity Cloud or Microsoft Entra ID (Azure AD).
Experience with email security tools like Proofpoint or Mimecast.
SOC leadership or mentoring experience.
Basic scripting experience (Python or similar).
Security certifications (optional): GCIA, GCIH, GCED, Splunk certifications, Security+, CCNA, or cloud security certifications.

Responsibilities

Review, monitor, and evaluate SOC alerts and investigation outputs based on predefined scenarios and criteria.
Distinguish true positives from false positives by validating investigative evidence and alert context.
Perform end-to-end security investigations when required, including log analysis, entity pivoting, timeline reconstruction, and evidence correlation.
Assess the correctness, completeness, and quality of SOC investigations produced by automated or human workflows.
Apply consistent investigative judgment while recognizing that multiple valid investigation paths may exist for the same alert.
Make clear binary determinations (e.g., ACCEPT / PASS) while also producing detailed ground-truth investigations when required.
Use Splunk extensively to pivot across logs, entities, and timelines, including reading and reasoning about SPL queries.
Maintain clear and accurate documentation of investigative steps, assumptions, evidence, and conclusions.
Collaborate with program leads and other expert annotators to uphold high-quality investigation and annotation standards.
Mentor or support other analysts where applicable, particularly in long-term or lead annotator roles.

Requirements

3+ years of hands-on experience as a SOC analyst in a production SOC environment (Tier 2 or above strongly preferred).
Strong understanding of alert triage, incident investigation workflows, and evidence-based decision-making under time constraints.
Mandatory hands-on experience with Splunk, including:
Conducting investigations using Splunk
Reading, understanding, and reasoning about SPL queries
Pivoting between logs, entities, and timelines
Proven ability to evaluate SOC investigations and determine whether conclusions are valid, incomplete, or incorrect.
Strong investigative judgment and comfort making decisive evaluations.
Fluent English (written and spoken) with strong documentation and communication skills.

Nice to Have

Experience with Endpoint Detection & Response (EDR) tools such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or SentinelOne.
Experience analyzing cloud security logs and signals:
AWS (CloudTrail, GuardDuty)
Azure (Activity Log, Defender for Cloud)
GCP (Cloud Audit Logs)
Familiarity with Identity & Access Management platforms such as Okta Identity Cloud or Microsoft Entra ID (Azure AD).
Experience with email security tools like Proofpoint or Mimecast.
SOC leadership or mentoring experience.
Basic scripting experience (Python or similar).
Security certifications (optional): GCIA, GCIH, GCED, Splunk certifications, Security+, CCNA, or cloud security certifications.

Senior Data Engineer

at OSBIndia Private Limited

Posted by Ashwini Mamidi

Bengaluru (Bangalore), Hyderabad

5 - 12 yrs

₹10L - ₹18L / yr

Data Warehouse (DWH)

Informatica

ETL

SQL

Stored Procedures

+3 more

1. Core Responsibilities

· Leading solutions for data engineering

· Maintain the integrity of both the design and the data that is held within the architecture

· Champion and educate people in the development and use of data engineering best practises

· Support the Head of Data Engineering and lead by example

· Contribute to the development of database management services and associated processes relating to the delivery of data solutions

· Provide requirements analysis, documentation, development, delivery and maintenance of data platforms.

· Develop database requirements in a structured and logical manner ensuring delivery is aligned with business prioritisation and best practise

· Design and deliver performance enhancements, application migration processes and version upgrades across a pipeline of BI environments.

· Provide support for the scoping and delivery of BI capability to internal users.

· Identify risks and issues and escalate to Line / Project manager.

· Work with clients, existing asset owners & their service providers and non BI development staff to clarify and deliver work stream objectives in timescales that deliver to the overall project expectations.

· Develop and maintain documentation in support of all BI processes.

· Proactively identify cost-justifiable improvements to data manipulation processes.

· Research and promote relevant BI tools and processes that contribute to increased efficiency and capability in support of corporate objectives.

· Promote a culture that embraces change, continuous improvement and a ‘can do’ attitude.

· Demonstrate enthusiasm and self-motivation at all times.

· Establish effective working relationships with other internal teams to drive improved efficiency and effective processes.

· Be a champion for high quality data and use of strategic data repositories, associated relational model, and Data Warehouse for optimising the delivery of accurate, consistent and reliable business intelligence

· Ensure that you fully understand and comply with the organisation’s Risk Management Policies as they relate to your area of responsibility and demonstrate in your day to day work that you put customers at the heart of everything you do.

· Ensure that you fully understand and comply with the organisation’s Data Governance Policies as they relate to your area of responsibility and demonstrate in your day to day work that you treat data as an important corporate asset which must be protected and managed.

· Maintain the company’s compliance standards and ensure timely completion of all mandatory on-line training modules and attestations.

2. Experience Requirements

· 5 years Data Engineering / ETL development experience is essential

· 5 years data design experience in an MI / BI / Analytics environment (Kimball, lake house, data lake) is essential

· 5 years experience of working in a structured Change Management project lifecycle is essential

· Experience of working in a financial services environment is desirable

· Experience of dealing with senior management within a large organisation is desirable

· 5 years experience of developing in conjunction with large complex projects and programmes is desirable

· Experience mentoring other members of the team on best practise and internal standards is essential

· Experience with cloud data platforms desirable (Microsoft Azure) is desirable

3. Knowledge Requirements

· A strong knowledge of business intelligence solutions and an ability to translate this into data solutions for the broader business is essential

· Strong demonstrable knowledge of data warehouse methodologies

· Robust understanding of high level business processes is essential

· Understanding of data migration, including reconciliation, data cleanse and cutover is desirable