Job Summary
Security SOC Analyst - Managed Services (L1) Role Summary The Security Operations Center (SOC) Analyst - L1 is responsible for 24x7 security monitoring, event analysis, incident triage, and initial response activities. The analyst serves as the first line of defense by monitoring security alerts, identifying potential threats, performing preliminary investigations, and escalating confirmed incidents to higher support levels in accordance with established procedures. Experience • 1 to 3 years of experience in SOC, Security Operations, Cyber Security, or IT Operations. • Experience with SIEM monitoring and incident handling is preferred. • Freshers with cybersecurity certifications may also be considered. Required Technical Skills • Splunk Enterprise Security • OT/Security • Armis • Qualys
Security SOC Analyst - Managed Services (L1)\\\\r\\\\nRole Summary\\\\r\\\\nThe Security Operations Center (SOC) Analyst - L1 is responsible for 24x7 security monitoring, event analysis, incident triage, and initial response activities. The analyst serves as the first line of defense by monitoring security alerts, identifying potential threats, performing preliminary investigations, and escalating confirmed incidents to higher support levels in accordance with established procedures.\\\\r\\\\nExperience\\\\r\\\\n• 1 to 3 years of experience in SOC, Security Operations, Cyber Security, or IT Operations.\\\\r\\\\n• Experience with SIEM monitoring and incident handling is preferred.\\\\r\\\\n• Freshers with cybersecurity certifications may also be considered.\\\\r\\\\n\\\\r\\\\nRequired Technical Skills\\\\r\\\\n• Splunk Enterprise Security\\\\r\\\\n• OT/Security\\\\r\\\\n• Armis\\\\r\\\\n• Qualys\\\\r\\\\n\\\\r\\\\nKey Responsibilities\\\\r\\\\n• Monitor security alerts and events from SIEM, EDR, IDS/IPS, Firewall, Proxy, and Cloud Security solutions.\\\\r\\\\n• Perform initial triage and analysis of security incidents.\\\\r\\\\n• Investigate suspicious activities and determine potential impact.\\\\r\\\\n• Escalate high-severity incidents to L2/L3 SOC teams based on defined escalation procedures.\\\\r\\\\n• Document security incidents, findings, and actions taken in ticketing systems.\\\\r\\\\n• Monitor security dashboards and ensure timely alert handling as per SLA.\\\\r\\\\n• Support incident response activities during security events.\\\\r\\\\n• Conduct log analysis from various security devices and systems.\\\\r\\\\n• Identify false positives and reduce alert fatigue through proper analysis.\\\\r\\\\n• Maintain incident records, playbooks, and operational documentation.\\\\r\\\\n• Participate in shift handovers and provide detailed incident updates.\\\\r\\\\n• Follow security policies, procedures, and compliance requirements.\\\\r\\\\n\\\\r\\\\nTicketing & Monitoring\\\\r\\\\n• ServiceNow or equivalent ITSM platform\\\\r\\\\n• Incident Management Processes\\\\r\\\\n• Basic Threat Intelligence concepts\\\\r\\\\n
Key Responsibilities
Key Responsibilities • Monitor security alerts and events from SIEM, EDR, IDS/IPS, Firewall, Proxy, and Cloud Security solutions. • Perform initial triage and analysis of security incidents. • Investigate suspicious activities and determine potential impact. • Escalate high-severity incidents to L2/L3 SOC teams based on defined escalation procedures. • Document security incidents, findings, and actions taken in ticketing systems. • Monitor security dashboards and ensure timely alert handling as per SLA. • Support incident response activities during security events. • Conduct log analysis from various security devices and systems. • Identify false positives and reduce alert fatigue through proper analysis. • Maintain incident records, playbooks, and operational documentation. • Participate in shift handovers and provide detailed incident updates. • Follow security policies, procedures, and compliance requirements.
Skill Requirements
Ticketing & Monitoring • ServiceNow or equivalent ITSM platform • Incident Management Processes • Basic Threat Intelligence concepts