SOC Analyst L1

SOC Analyst

• Junior (L1) Experience: 0-2 years | Department: Infosec Roles and Responsibilities:
• Perform real-time monitoring of security events from multiple log sources.
• Daily tracking of events, alerts, and requests.
• Perform first-level triage of alerts and escalate confirmed incidents to L2 with proper evidence.
• Monitor SIEM components and analyze logs to ensure relevant security information is gathered.
• Use the SIEM tool to document security incidents and responses daily.
• Detect suspicious logs and create reports and charts for easy understanding.
• Perform first-level phishing email analysis (headers, URLs, attachments).
• Investigate basic alerts triggered by endpoints, email gateway, and antivirus.
• Handle queries and requests through calls and emails.
• Track vulnerability and patch status and follow up on closure.
• Assist in conducting security awareness training.
• Follow SOPs, playbooks, and shift handover procedures.
• Work as part of a team to ensure corporate data and technology platform components are safeguarded from known threats.

Preferred Qualifications

• 0-2 years of experience with a Bachelor's degree in Computer Science, or a related technical domain from reputed organizations.
• Should have exposure to SIEM tools like QRadar, LogRhythm, sentinelone, Log360 and endpoint security like EDR, XDR (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint).
• Should have worked on SIEM tools like QRadar, LogRhythm, sentinelone and endpoint security like EDR, XDR (CrowdStrike, SentinelOne).
• Should have basic knowledge of any DLP solution from any vendor.
• Good written and verbal communication, and willingness to work in shifts.
• Certifications such as CompTIA Security+ or CEH are an added advantage.