At Sincratek, we believe reliable technology starts with people, systems, and support working in sync.

We provide technology support and operations services designed to keep businesses running smoothly around the clock. Our teams work across service desk operations, technical support, system and alert monitoring, incident and request management, application support, user administration, and access management, delivering dependable support at every step.

If you are passionate about technology, problem-solving, delivering excellent support, and working in a collaborative environment, we would love to hear from you.

About the Role

The SOC Analyst L2 is responsible for advanced security monitoring, incident triage, investigation, escalation, and operational support within the Security Operations Center. This role requires hands-on experience in analysing security events, validating threats, supporting incident response activities, and administering security platforms such as SIEM, endpoint detection and response, email security, vulnerability management, cloud security, and case management tools. The analyst will help maintain platform health, tune detection content, support onboarding of log sources, document investigations, and coordinate with global teams to operate Security Operations in a Follow-The-Sun model. The role is based on-site in Hyderabad and is suited to experienced cybersecurity professionals who can combine SOC operations expertise with practical security tool administration capability.

Key Responsibilities

Monitor security alerts and events across SIEM, endpoint, network, email, and cloud security tools.

Perform L2 triage and investigation of security alerts, including validation, enrichment, impact assessment, containment recommendations, and escalation where required.

Escalate suspected or confirmed incidents to incident responders, platform owners, infrastructure teams, or business stakeholders according to defined runbooks and severity criteria.

Document investigations, response actions, evidence, and closure rationale accurately in ticketing and case management systems for audit, reporting, and knowledge management purposes.

Correlate logs and events from multiple sources to identify suspicious patterns, indicators of compromise, or repeated attack activity.

Administer and support security platforms by performing user access updates, configuration changes, log source onboarding, connector health checks, alert tuning, rule updates, dashboard maintenance, and operational troubleshooting.

Support 24/7 monitoring operations through shift work, handovers, and adherence to service level expectations where applicable.

Communicate effectively in English when documenting incidents, coordinating with internal stakeholders, and supporting regional or global security operations.

Maintain awareness of current threats affecting enterprise environments across financial services, retail, logistics, telecommunications, and other regional industries.

Qualifications & Experience

Bachelor’s degree or currently completed studies in Cybersecurity, Information Technology, Computer Science, Systems Engineering, or a related discipline.

3–5 years of experience in cybersecurity operations, SOC monitoring, incident investigation, security engineering support, platform administration, or a related technical role.

Strong understanding of networking, operating systems, identity and access concepts, cloud services, attacker techniques, and common cyber threats such as phishing, malware, credential compromise, and unauthorized access attempts.

Hands-on experience with SIEM, EDR, email security, vulnerability management, cloud security, identity security, or case management platforms, including basic administration or operational support activities.

Ability to write clear investigation notes, follow runbooks, support detection tuning, maintain operational documentation, and work effectively in a structured security operations environment.

Working proficiency in English is strongly preferred to support multinational teams and stakeholders.

Availability to work on-site in Panama City, Panama required.

Preferred

Professional certifications such as CompTIA Security+, CySA+, SC-200, AZ-500, Microsoft Sentinel, Splunk, QRadar, CEH, or equivalent SOC and platform administration credentials.

Experience supporting SOC, NOC, help desk, or IT operations environments in banking, retail, logistics, telecommunications, or managed services.

Experience administering or supporting Microsoft Sentinel, Microsoft Defender XDR, Splunk, QRadar, CrowdStrike, Tenable, Qualys, Proofpoint, Palo Alto, or comparable security technologies.

Experience with use case development, alert rule tuning, automation playbooks, threat intelligence enrichment, log source integration, or platform health monitoring.

Understanding of compliance-focused environments and the importance of documentation, control adherence, and audit support.

Strong customer service mindset and the ability to coordinate professionally with internal users, technical teams, and business stakeholders.

What We Offer

Competitive compensation package.
Professional growth and development opportunities.
Exposure to international teams and technology environments.
Collaborative and supportive company culture.
Opportunity to work within a growing technology operations organization.
Hands-on experience with modern systems, tools, and operational processes.

Equal Opportunity Employer

Sincratek is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We welcome applications from qualified candidates regardless of race, ethnicity, gender, age, disability, religion, sexual orientation, or background.

SOC Analyst (L2)

Join Sincratek and be part of a technology team keeping systems, operations, and people in sync. Grow your career while delivering reliable technology support in an international environment.