SOC Analyst

SOC Analyst - Junior (L1) Experience: 0-2 years | Department: Infosec
Roles and Responsibilities: • Perform real-time monitoring of security events from multiple log sources. • Daily tracking of events, alerts, and requests. • Perform first-level triage of alerts and escalate confirmed incidents to L2 with proper evidence. • Monitor SIEM components and analyze logs to ensure relevant security information is gathered. • Use the SIEM tool to document security incidents and responses daily. • Detect suspicious logs and create reports and charts for easy understanding. • Perform first-level phishing email analysis (headers, URLs, attachments). • Investigate basic alerts triggered by endpoints, email gateway, and antivirus. • Handle queries and requests through calls and emails. • Track vulnerability and patch status and follow up on closure. • Assist in conducting security awareness training. • Follow SOPs, playbooks, and shift handover procedures. • Work as part of a team to ensure corporate data and technology platform components are safeguarded from known threats.
Preferred Qualifications: • 0-2 years of experience with a Bachelor's degree in Computer Science, or a related technical domain from reputed organizations. • Should have exposure to SIEM tools like QRadar, LogRhythm, sentinelone, Log360 and endpoint security like EDR, XDR (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint). • Should have worked on SIEM tools like QRadar, LogRhythm, sentinelone and endpoint security like EDR, XDR (CrowdStrike, SentinelOne). • Should have basic knowledge of any DLP solution from any vendor. • Good written and verbal communication, and willingness to work in shifts. • Certifications such as CompTIA Security+ or CEH are an added advantage.