<p><strong>About Protera</strong></p><p>Welcome to Protera Technologies, where we’re reimagining how SAP-centric organizations work in the cloud. Since 1998, we’ve been pioneers in bringing SAP and related applications to the cloud—think Microsoft Azure and AWS. Our global crew, spanning the US with offices in Chicago (HQ), Athens, Greece, and Mumbai, India, is on a mission to make IT smoother, faster, and more fun for our clients.</p><p>But here’s the thing: we’re not your typical “serious tech company.” While we’re obsessed with delivering top-notch IT solutions, we’re all about keeping it real, approachable, and enjoyable. We work hard, but we also play hard—whether we’re collaborating on cloud optimizations, enhancing security, or just hanging out as a team.</p><p>At Protera, we believe in empowering SAP-centric organizations with the best tools and tech to drive growth, and we love what we do. Our values? Simple: stay curious, stay authentic, and make meaningful connections. We celebrate wins big and small, whether it's a successful project or a fun team event.</p><p>If you’re looking for a place where tech and fun collide, come join us and see what makes Protera a great place to work.</p><p><strong>Shift Timing- Rotational (24*7)</strong></p><p><strong>Work mode- Remote </strong></p><p><strong>What You’ll Do</strong></p><p>The SOC Analyst is responsible for maintaining the organization’s cybersecurity posture through continuous monitoring, detection, and incident response. Using advanced technologies such as Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Network Detection and Response (NDR), File Integrity Monitoring (FIM), and Next-Gen Antivirus (NGAV), the analyst identifies and mitigates security threats in real time. This role also contributes to the design and development of automated playbooks using Security Orchestration, Automation, and Response (SOAR) platforms to streamline response workflows and improve SOC efficiency. The analyst collaborates across teams to strengthen detection logic, enhance processes, and ensure proactive defense against evolving cyber threats.</p><h3>Threat Monitoring &amp; Detection</h3><ul><li>Monitor and analyze security alerts from SIEM, EDR, NDR, FIM, and Antivirus platforms to detect potential threats.</li><li>Perform correlation and pattern analysis across multiple data sources to identify anomalies and sophisticated attack behaviors.</li><li>Continuously tune and optimize detection rules to reduce false positives and improve fidelity.</li></ul><h3>Incident Response &amp; Management</h3><ul><li>Execute incident response lifecycle activities including triage, containment, eradication, and recovery following NIST standards.</li><li>Document incidents thoroughly, providing root cause analysis, attack vectors, and corrective actions.</li><li>Support post-incident reviews to identify control gaps and recommend security improvements.</li></ul><h3>Playbook Development &amp; Automation</h3><ul><li>Develop, maintain, and enhance incident response playbooks and runbooks to ensure standardized handling of recurring alerts and use cases.</li><li>Collaborate with senior analysts to build SOAR playbooks for automated enrichment, containment, and notification workflows.</li><li>Align playbooks with MITRE ATT&amp;CK and Cyber Kill Chain frameworks to ensure comprehensive coverage of adversarial tactics.</li></ul><h3>Vulnerability &amp; Risk Management</h3><ul><li>Conduct regular vulnerability assessments and coordinate with IT teams for timely remediation.</li><li>Evaluate system configurations and network architecture for potential risks and ensure secure baselines.</li><li>Track and report on vulnerability remediation metrics.</li></ul><h3>Security Tooling &amp; Integration</h3><ul><li>Manage and optimize EDR, SIEM, SOAR, FIM, NDR, and Antivirus tools to ensure operational readiness.</li><li>Integrate data sources and automate workflows between platforms for improved incident visibility and response time.</li><li>Provide input on the design and deployment of new security solutions.</li></ul><h3>File Integrity &amp; Endpoint Protection</h3><ul><li>Monitor File Integrity Monitoring (FIM) systems to detect unauthorized modifications in critical files and directories.</li><li>Analyze and respond to Antivirus/NGAV alerts to prevent and contain endpoint infections.</li><li>Validate cleanup and verify systems post-remediation.</li></ul><h3>Network Detection &amp; Threat Intelligence</h3><ul><li>Leverage NDR tools to identify lateral movement, command-and-control (C2) traffic, and exfiltration attempts.</li><li>Incorporate Threat Intelligence Feeds (STIX/TAXII) for enhanced situational awareness and detection context.</li><li>Conduct proactive threat hunting based on known TTPs (Tactics, Techniques, and Procedures).</li></ul><h3>Reporting &amp; Compliance</h3><ul><li>Generate detailed reports and dashboards highlighting incident metrics, trends, and SOC performance (MTTD, MTTR, volume by category).</li><li>Ensure compliance with standards like ISO 27001, SOC 2, GDPR, HIPAA, and NIST CSF.</li><li>Support audits and assist in evidence gathering for compliance activities.</li></ul><p><strong>Requirements</strong></p><p><strong>What You Bring</strong></p><p><strong>Skills &amp; Qualifications</strong></p><ul><li>Experience: 4+ years in SOC operations, cybersecurity, or incident response.</li></ul><p><strong>Technical Expertise:</strong></p><ul><li>Strong knowledge of EDR, SIEM, SOAR, NDR, FIM, and Antivirus/NGAV platforms.</li><li>Experience in writing playbooks, automating responses, and tuning detection logic.</li><li>Familiarity with incident handling frameworks, threat hunting, and digital forensics.</li><li>Framework Knowledge: MITRE ATT&amp;CK, Cyber Kill Chain, NIST IR, ISO 27001.</li><li>Certifications (Preferred): CompTIA Security+, CySA+, CEH, Microsoft SC-200, or equivalent.</li></ul><p><strong>Tools Exposure (Preferred):</strong></p><ul><li>SIEM: Splunk, Microsoft Sentinel, QRadar, Elastic.</li><li>EDR/NDR: CrowdStrike Falcon, Defender for Endpoint, SentinelOne, Darktrace, Corelight.</li><li>FIM/AV: Tripwire, Qualys FIM, Trellix/McAfee, Sophos, Bitdefender.</li><li>SOAR: Cortex XSOAR, Splunk SOAR, Microsoft Sentinel Automation.</li></ul><h3>Desired Candidate Profile</h3><ul><li>Experience creating and maintaining incident response playbooks and runbooks.</li><li>Ability to perform threat hunting and deep-dive investigation using EDR, NDR, and SIEM telemetry.</li><li>Knowledge of security automation, cloud-native security, and network forensics.</li><li>Strong communication and documentation skills for both technical and executive audiences.</li><li>Works effectively in high-pressure, time-sensitive environments while maintaining precision and accuracy.</li></ul><p><strong>Benefits</strong></p><ul><li>Work from Home set-up  </li></ul><ul><li>Comprehensive medical benefits  </li></ul><ul><li> Gratuity, PF, EPS and Bonus, NPS  </li></ul><ul><li> Shift Allowances  </li></ul><ul><li>On-call Allowance  </li></ul><ul><li>Health and wellness Allowances  </li></ul><ul><li>Learning and Development Allowances  </li></ul><ul><li>No question asked certification policy.  </li></ul><ul><li>Certification Bounty Bonus</li></ul>

<p>By 2050, the world's population will surpass 10 billion people. To feed the current population and future generations we need to address global food challenges, today. How can we solve this problem without overwhelming the planet? And how can we deliver higher quality, more nutritious food for everyone? With Protera&rsquo;s Natural Intelligence&trade; technology, we believe the future is already here. Protera&rsquo;s technology uses predictive algorithms that calculate millions of amino acid combinations and simulate protein patterns in a matter of seconds. Our technology is based in Deep Learning and allows us to shine a light on a previously untapped universe of proteins. We craft protein-based ingredients faster and more affordably than ever before, unlocking a revolution in human health, reducing damage to the environment, and preventing food waste. Our first products already exceed the performance, scalability, and functionality of existing alternative ingredients. Please visit proterabio.com, contact us at (415)-256-7667, or email us at info@proterabio.com</p>

SOC Analyst (L2)

<p><strong>About Protera</strong></p><p>Welcome to Protera Technologies, where we’re reimagining how SAP-centric organizations work in the cloud. Since 1998, we’ve been pioneers in bringing SAP and related applications to the cloud—think Microsoft Azure and AWS. Our global crew, spanning the US with offices in Chicago (HQ), Athens, Greece, and Mumbai, India, is on a mission to make IT smoother, faster, and more fun for our clients.</p><p>But here’s the thing: we’re not your typical “serious tech company.” While we’re obsessed with delivering top-notch IT solutions, we’re all about keeping it real, approachable, and enjoyable. We work hard, but we also play hard—whether we’re collaborating on cloud optimizations, enhancing security, or just hanging out as a team.</p><p>At Protera, we believe in empowering SAP-centric organizations with the best tools and tech to drive growth, and we love what we do. Our values? Simple: stay curious, stay authentic, and make meaningful connections. We celebrate wins big and small, whether it's a successful project or a fun team event.</p><p>If you’re looking for a place where tech and fun collide, come join us and see what makes Protera a great place to work.</p><p><strong>Shift Timing- Rotational (24*7)</strong></p><p><strong>Work mode- Remote </strong></p><p><strong>What You’ll Do</strong></p><p>The SOC Analyst is responsible for maintaining the organization’s cybersecurity posture through continuous monitoring, detection, and incident response. Using advanced technologies such as Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Network Detection and Response (NDR), File Integrity Monitoring (FIM), and Next-Gen Antivirus (NGAV), the analyst identifies and mitigates security threats in real time. This role also contributes to the design and development of automated playbooks using Security Orchestration, Automation, and Response (SOAR) platforms to streamline response workflows and improve SOC efficiency. The analyst collaborates across teams to strengthen detection logic, enhance processes, and ensure proactive defense against evolving cyber threats.</p><h3>Threat Monitoring &amp; Detection</h3><ul><li>Monitor and analyze security alerts from SIEM, EDR, NDR, FIM, and Antivirus platforms to detect potential threats.</li><li>Perform correlation and pattern analysis across multiple data sources to identify anomalies and sophisticated attack behaviors.</li><li>Continuously tune and optimize detection rules to reduce false positives and improve fidelity.</li></ul><h3>Incident Response &amp; Management</h3><ul><li>Execute incident response lifecycle activities including triage, containment, eradication, and recovery following NIST standards.</li><li>Document incidents thoroughly, providing root cause analysis, attack vectors, and corrective actions.</li><li>Support post-incident reviews to identify control gaps and recommend security improvements.</li></ul><h3>Playbook Development &amp; Automation</h3><ul><li>Develop, maintain, and enhance incident response playbooks and runbooks to ensure standardized handling of recurring alerts and use cases.</li><li>Collaborate with senior analysts to build SOAR playbooks for automated enrichment, containment, and notification workflows.</li><li>Align playbooks with MITRE ATT&amp;CK and Cyber Kill Chain frameworks to ensure comprehensive coverage of adversarial tactics.</li></ul><h3>Vulnerability &amp; Risk Management</h3><ul><li>Conduct regular vulnerability assessments and coordinate with IT teams for timely remediation.</li><li>Evaluate system configurations and network architecture for potential risks and ensure secure baselines.</li><li>Track and report on vulnerability remediation metrics.</li></ul><h3>Security Tooling &amp; Integration</h3><ul><li>Manage and optimize EDR, SIEM, SOAR, FIM, NDR, and Antivirus tools to ensure operational readiness.</li><li>Integrate data sources and automate workflows between platforms for improved incident visibility and response time.</li><li>Provide input on the design and deployment of new security solutions.</li></ul><h3>File Integrity &amp; Endpoint Protection</h3><ul><li>Monitor File Integrity Monitoring (FIM) systems to detect unauthorized modifications in critical files and directories.</li><li>Analyze and respond to Antivirus/NGAV alerts to prevent and contain endpoint infections.</li><li>Validate cleanup and verify systems post-remediation.</li></ul><h3>Network Detection &amp; Threat Intelligence</h3><ul><li>Leverage NDR tools to identify lateral movement, command-and-control (C2) traffic, and exfiltration attempts.</li><li>Incorporate Threat Intelligence Feeds (STIX/TAXII) for enhanced situational awareness and detection context.</li><li>Conduct proactive threat hunting based on known TTPs (Tactics, Techniques, and Procedures).</li></ul><h3>Reporting &amp; Compliance</h3><ul><li>Generate detailed reports and dashboards highlighting incident metrics, trends, and SOC performance (MTTD, MTTR, volume by category).</li><li>Ensure compliance with standards like ISO 27001, SOC 2, GDPR, HIPAA, and NIST CSF.</li><li>Support audits and assist in evidence gathering for compliance activities.</li></ul><p><strong>Requirements</strong></p><p><strong>What You Bring</strong></p><p><strong>Skills &amp; Qualifications</strong></p><ul><li>Experience: 4+ years in SOC operations, cybersecurity, or incident response.</li></ul><p><strong>Technical Expertise:</strong></p><ul><li>Strong knowledge of EDR, SIEM, SOAR, NDR, FIM, and Antivirus/NGAV platforms.</li><li>Experience in writing playbooks, automating responses, and tuning detection logic.</li><li>Familiarity with incident handling frameworks, threat hunting, and digital forensics.</li><li>Framework Knowledge: MITRE ATT&amp;CK, Cyber Kill Chain, NIST IR, ISO 27001.</li><li>Certifications (Preferred): CompTIA Security+, CySA+, CEH, Microsoft SC-200, or equivalent.</li></ul><p><strong>Tools Exposure (Preferred):</strong></p><ul><li>SIEM: Splunk, Microsoft Sentinel, QRadar, Elastic.</li><li>EDR/NDR: CrowdStrike Falcon, Defender for Endpoint, SentinelOne, Darktrace, Corelight.</li><li>FIM/AV: Tripwire, Qualys FIM, Trellix/McAfee, Sophos, Bitdefender.</li><li>SOAR: Cortex XSOAR, Splunk SOAR, Microsoft Sentinel Automation.</li></ul><h3>Desired Candidate Profile</h3><ul><li>Experience creating and maintaining incident response playbooks and runbooks.</li><li>Ability to perform threat hunting and deep-dive investigation using EDR, NDR, and SIEM telemetry.</li><li>Knowledge of security automation, cloud-native security, and network forensics.</li><li>Strong communication and documentation skills for both technical and executive audiences.</li><li>Works effectively in high-pressure, time-sensitive environments while maintaining precision and accuracy.</li></ul><p><strong>Benefits</strong></p><ul><li>Work from Home set-up &nbsp;</li></ul><ul><li>Comprehensive medical benefits &nbsp;</li></ul><ul><li> Gratuity, PF, EPS and Bonus, NPS &nbsp;</li></ul><ul><li> Shift Allowances &nbsp;</li></ul><ul><li>On-call Allowance &nbsp;</li></ul><ul><li>Health and wellness Allowances &nbsp;</li></ul><ul><li>Learning and Development Allowances &nbsp;</li></ul><ul><li>No question asked certification policy. &nbsp;</li></ul><ul><li>Certification Bounty Bonus</li></ul>

SOC Analyst (L2)

About the Job

About the Company

Protera

Similar Jobs

SOC Engineer

SOC Engineer

Cybersecurity Engineer

Cybersecurity Engineer

IT Security Detection Engineer

IT Security Detection Engineer

Senior SOC Analyst

Senior SOC Analyst

SOC Analyst (L1)

SOC Analyst (L1)

SOC Analyst (L2)

SOC Analyst (L2)

Cloud Engineer (L2)

Cloud Engineer (L2)

Security Engineer

Security Engineer

SOC Analyst L1

SOC Analyst L1

Plant Cyber Security Engineer III (Remote)

Plant Cyber Security Engineer III (Remote)