We are looking for a motivated and detail-oriented SOC Analyst (L1) to join our Security Operations Center. As a first line of defence, you will monitor security alerts, triage incidents, and escalate threats in a timely manner. This is an excellent opportunity for early-career cybersecurity professionals to gain hands-on experience in a live SOC environment with exposure to enterprise-grade security tools.

Monitor security events and alerts generated by SIEM tools (Splunk, QRadar, Microsoft Sentinel) on a 24x7 basis Perform initial triage, analysis, and classification of security incidents based on defined playbooks and SOPs Identify, investigate, and document potential threats, vulnerabilities, and security incidents Escalate confirmed or high-priority incidents to L2/L3 analysts with detailed investigation notes Analyze logs from firewalls, IDS/IPS, endpoints, servers, and cloud environments for anomalous behaviour Perform basic malware identification using threat intelligence tools Create, update, and close incident tickets in ITSM platforms (ServiceNow / Jira) with accurate records Follow incident response procedures and runbooks to contain and mitigate threats Generate daily/weekly shift handover reports and security incident summaries Stay updated on the latest cybersecurity threats, CVEs, and attack techniques

Technical: Hands-on understanding of SIEM platforms — Splunk / QRadar / Microsoft Sentinel / ArcSight Knowledge of network protocols: TCP/IP, DNS, HTTP/S, SMTP, FTP, SSH Familiarity with firewalls, IDS/IPS, proxy, and endpoint security tools Basic understanding of Windows and Linux OS and log analysis Knowledge of OWASP Top 10 and MITRE ATT&CK framework Exposure to threat intelligence tools (VirusTotal, AbuseIPDB, etc.) Soft Skills: Strong analytical and problem-solving mindset with keen attention to detail Ability to work effectively under pressure in a 24x7 shift environment Good written and verbal communication for incident documentation and escalation