SOC Analyst – L1

We are looking for a SOC Analyst – L1 to monitor, triage, and investigate security alerts and escalate confirmed incidents to L2/L3 teams.
Key Responsibilities
Monitor and analyze security alerts using SIEM and security monitoring tools.
Perform initial alert triage and investigate suspicious activities.
Analyze logs from endpoints, firewalls, servers, and network devices.
Identify IOCs and common security threats such as malware, phishing, brute-force attacks, and unauthorized access.
Escalate genuine/complex incidents as per SOC procedures and SLA.
Maintain accurate incident documentation and shift handovers.
Follow SOC playbooks, SOPs, and incident response processes.
Required Skills
Basic knowledge of SOC operations, SIEM, networking, Windows/Linux, and cybersecurity fundamentals.
Hands-on or training experience with Splunk, Microsoft Sentinel, QRadar, or similar SIEM tools.
Understanding of TCP/IP, DNS, HTTP/HTTPS, firewalls, VPN, IDS/IPS, and EDR concepts.
Basic knowledge of MITRE ATT&CK and threat intelligence is preferred.
Good analytical and communication skills.
Willingness to work in rotational/24x7 shifts.
Preferred Certifications
TCM Security SOC certifications
Splunk Certification
CEH or other relevant cybersecurity certifications
Freshers with relevant certifications, cybersecurity training, labs, internships, or hands-on SIEM experience are encouraged to apply.

Work arrangement
No