01
TRPD-26-06837
Consultant / Associate Manager (Initial L2 SOC Analyst)
This is a permanent Initial L2 SOC Analyst role focused on investigating and validating security alerts independently rather than simply forwarding them. The core requirements are incident triage, analysis of phishing, malware and endpoint alerts, process and command-line investigation, event correlation, and clear evidence collection and documentation. The role specifically calls for Microsoft Sentinel, basic-to-intermediate KQL, and Microsoft Defender XDR; false-positive identification, basic detection-rule tuning, and severity-based escalation are also part of the work. The structured experience band is 2–4 years, and the location is Pune; the description does not specify a work mode. The supplied title includes Consultant / Associate Manager, while the duties describe an Initial L2 SOC Analyst role, so sourcing should also include SOC Analyst titles.
Position summary
- Location
- India
- Workplace
- On-site
- Employment
- Full Time
- Experience
- Minimum 2 years and Maximum 4 years
Role overview
Why This Role Matters.
This is a permanent Initial L2 SOC Analyst role focused on investigating and validating security alerts independently rather than simply forwarding them. The core requirements are incident triage, analysis of phishing, malware and endpoint alerts, process and command-line investigation, event correlation, and clear evidence collection and documentation. The role specifically calls for Microsoft Sentinel, basic-to-intermediate KQL, and Microsoft Defender XDR; false-positive identification, basic detection-rule tuning, and severity-based escalation are also part of the work. The structured experience band is 2–4 years, and the location is Pune; the description does not specify a work mode. The supplied title includes Consultant / Associate Manager, while the duties describe an Initial L2 SOC Analyst role, so sourcing should also include SOC Analyst titles.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Ø Analyze phishing emails, malware alerts, endpoint-related incidents and suspicious activities.
03
Ø Examine suspicious processes, command-line executions and parent-child process relationships.
04
Ø Correlate security events across multiple log sources to identify potential threats.
05
Ø Identify false positives and provide recommendations for basic detection-rule tuning.
06
Ø Understand incident severity, potential impact, prioritization and escalation requirements.
07
Ø Perform incident triage, evidence collection and proper investigation documentation.
08
Ø Tools proficiency: Microsoft Sentinel, basic-to-intermediate KQL and Microsoft Defender XDR.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
Microsoft Sentinel
Required
02
Azure Sentinel
Required
03
KQL
Required
04
Kusto Query Language
Required
05
Microsoft Defender XDR
Required
06
Defender XDR
Required
07
Microsoft security alerts
Required
08
SIEM
Required
09
SOC
Required
10
L2 SOC
Required
11
security alert triage
Required
12
incident investigation
Required
13
incident response
Required
14
phishing analysis
Required
15
malware analysis
Required
16
endpoint security
Required
17
endpoint detection and response
Required
18
EDR
Required
19
process analysis
Required
20
command-line analysis
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Independent security alert investigation and validation
Incident triage, evidence collection, and investigation documentation
Phishing, malware, endpoint incident, and suspicious-activity analysis
Process, command-line, and parent-child process investigation
Correlation of events across multiple log sources
False-positive identification and basic detection-rule tuning
Incident severity, impact assessment, prioritization, and escalation
Microsoft Sentinel
Basic-to-intermediate KQL
Microsoft Defender XDR
Preferred
Nice to Have
There are no additional preferred qualifications for this position. If you meet the essential requirements, we encourage you to apply.
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Consultant / Associate Manager (Initial L2 SOC Analyst)
One page, about two minutes. We only ask for what we actually need to have a first conversation.