TRPD-26-06838
Deputy Manager (L2 / Initial L3 SOC Analyst)
This is a Deputy Manager-level SOC analyst role focused on investigating and responding to security incidents, with the work centered on SOC operations rather than a specified product or industry. The core requirements include investigating phishing, malware, brute-force and account-compromise incidents; analyzing Windows and identity telemetry; and using Microsoft Sentinel with hands-on KQL, plus Microsoft Defender and EDR/XDR investigation. Threat hunting, MITRE ATT&CK, detection-rule tuning, incident triage, root-cause analysis, timelines and impact assessment are also specified; no separate nice-to-haves are stated. The structured experience band is 5–7 years, and the role is permanent in Pune. The description gives a combined L2 / initial L3 title, but does not specify a work mode or further team or company context.
Position summary
- Location
- India
- Workplace
- On-site
- Employment
- Full Time
- Experience
- Minimum 5 years and Maximum 7 years
Role overview
Why This Role Matters.
This is a Deputy Manager-level SOC analyst role focused on investigating and responding to security incidents, with the work centered on SOC operations rather than a specified product or industry. The core requirements include investigating phishing, malware, brute-force and account-compromise incidents; analyzing Windows and identity telemetry; and using Microsoft Sentinel with hands-on KQL, plus Microsoft Defender and EDR/XDR investigation. Threat hunting, MITRE ATT&CK, detection-rule tuning, incident triage, root-cause analysis, timelines and impact assessment are also specified; no separate nice-to-haves are stated. The structured experience band is 5–7 years, and the role is permanent in Pune. The description gives a combined L2 / initial L3 title, but does not specify a work mode or further team or company context.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
Ø Good understanding of Windows Event Logs, Active Directory, Kerberos, authentication and lateral movement.
Ø Knowledge of MITRE ATT&CK framework, threat intelligence and attack techniques
Ø Exposure to threat hunting, log correlation, identifying suspicious activities and detection-rule tuning.
Ø Ability to perform incident triage, root cause analysis, attack timeline creation and impact assessment.
Ø Tool Proficiency: SIEM tools (Microsoft Sentinel) and hands-on KQL query writing | Practical experience in EDR/XDR investigation, including Microsoft Defender and endpoint threat analysis.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
SOC
SIEM
Microsoft Sentinel
Azure Sentinel
KQL
Kusto Query Language
Microsoft Defender
Microsoft Defender for Endpoint
EDR
XDR
Windows Event Logs
Windows Security Logs
Active Directory
AD
Kerberos
MITRE ATT&CK
Threat Intelligence
Threat Hunting
Log Correlation
Detection Rules
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Investigate complex security incidents, including phishing, malware, brute force and account compromise
Analyze Windows Event Logs, Active Directory, Kerberos, authentication and lateral movement
Understand the MITRE ATT&CK framework, threat intelligence and attack techniques
Conduct threat hunting, log correlation and suspicious-activity identification
Tune detection rules
Perform incident triage, root-cause analysis, attack timeline creation and impact assessment
Use Microsoft Sentinel SIEM
Write KQL queries
Investigate EDR/XDR alerts using Microsoft Defender and analyze endpoint threats
Preferred
Nice to Have
There are no additional preferred qualifications for this position. If you meet the essential requirements, we encourage you to apply.
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Deputy Manager (L2 / Initial L3 SOC Analyst)
One page, about two minutes. We only ask for what we actually need to have a first conversation.