SoC Analyst

SOC Engineer (0-4 Years) | Bangalore | Immediate Joiners Location: Bangalore (100% Work from Office)

Experience: 0-4 Years

Shift: Rotational Shifts

Notice Period: Immediate Joiners Preferred

Qualification: Bachelor's Degree with CEH Certification

About The Role We are looking for a SOC Engineer to monitor security events, perform alert management, conduct initial incident qualification, and escalate confirmed security incidents to the SOC Manager. The role involves working closely with security monitoring tools, SIEM platforms, and endpoint security solutions to ensure timely detection and response to cybersecurity threats.

Key Responsibilities

• Monitor, acknowledge, analyze, and validate security incidents generated through SIEM platforms and other reporting channels.
• Perform initial incident triage, investigation, and qualification of security alerts.
• Collect and analyze logs required for incident containment and security investigations.
• Escalate validated security incidents to the SOC Lead/Manager as per defined procedures.
• Conduct first-level false positive and false negative analysis.
• Analyze logs from various sources including Firewalls, IDS/IPS, Windows Servers, Cisco devices, Endpoint Security, Email Security, and Anti-malware solutions.
• Create and manage incident tickets in ITSM tools, ensuring accurate documentation of alerts, indicators, and investigation findings.
• Track incidents through closure while providing timely updates to stakeholders.
• Report infrastructure or security tool issues to the relevant IT support teams.
• Support security operations activities and adhere to established SLA and incident response procedures.

Required Skills & Experience

• Hands-on experience with security solutions such as McAfee EDR, CrowdStrike, McAfee ENS, DLP, CASB, and other security technologies.
• Experience working with SIEM platforms such as LogRhythm and McAfee Enterprise Security Manager (ESM).
• Basic understanding of SIEM administration and correlation rule creation.
• Strong knowledge of TCP/IP networking, network traffic analysis, and event log analysis.
• Understanding of cybersecurity monitoring, threat detection, and incident response processes.
• Knowledge of ITIL practices, including Incident, Problem, and Change Management.
• Good analytical, troubleshooting, and communication skills.

Preferred Qualifications

• CEH (Certified Ethical Hacker) certification.
• Exposure to SOC operations, incident handling, and security monitoring processes.
• Ability to work effectively in a 24x7 rotational shift environment.

Interested candidates who can join immediately are encouraged to apply.