Company: Provision Technologies LLP
Location: Gangtok, Sikkim
Employment type: Full-time | On-site
Experience: 3–5 years | Full-time
Work mode: 8×6
About the role:
Provision Technologies LLP is looking for a hands-on SOC Analyst / Security Engineer – L2 to join our Security Operations team supporting a critical infrastructure environment. We are looking for someone who can investigate incidents, understand what happened, identify the impact and drive the right response, rather than simply monitor and escalate alerts.
Key responsibilities
- Monitor and investigate security events using SIEM, EDR, firewall and network telemetry
- Perform incident investigation, response and root – cause analysis
- Conduct threat hunting, IOC analysis and threat intelligence enrichment
- Identify attack vectors, scope and impact, and support containment and remediation
- Tune SIEM rules and improve detection use cases
- Work with SOAR, UEBA, NBAD and MITRE ATT&CK
- Review and guide L1 escalations during complex incidents
- Prepare incident reports, timelines, RCA and remediation recommendations
- Contribute to SOC SOPs, playbooks and continuous improvement
- Coordinate with IT/OT teams during significant security incidents
Required skills
- Strong hands-on experience with SIEM and SOC operations
- Incident Response, Threat Hunting and Root Cause Analysis
- Log analysis, event correlation and detection engineering
- EDR, firewall, IDS/IPS and network security
- Windows and Linux security
- Threat Intelligence and MITRE ATT&CK
- Knowledge of SOAR, UEBA and NBAD is an advantage
- Exposure to OT/SCADA/ICS or critical infrastructure security is a plus
Qualification & experience
- B.Tech/B.E./BCA/MCA/M.Sc. in Computer Science, IT, Cybersecurity or equivalent
- 3-5 years of relevant SOC/Cybersecurity experience
- Minimum 3 years of hands-on SOC, SIEM, security monitoring or incident response experience
- Relevant certifications such as CEH, CySA+, GCIH, Security+, SC-200 are an advantage
Important
This is an on-site position in Gangtok, Sikkim. Candidates must be willing to relocate to Gangtok and work in a SOC environment supporting 24×7 operations.
