SOC Analyst - L1
Posted Updated
Summary
Entry-level SOC Analyst (L1) monitoring security events and logs in Splunk SIEM, triaging alerts, documenting incidents, and tracking tickets (BMC Remedy) before escalating to L2/L3 teams. Role is based in Hyderabad, with rotational or night shifts possible.
Job Summary
We are seeking SOC Analyst L1 professionals to monitor security events, investigate alerts, maintain incident documentation, and escalate potential security threats to senior analysts. Candidates should have practical knowledge of Splunk SIEM, alert monitoring, incident ticket management, and basic security operations.
Key Responsibilities
- Monitor security events, logs, and alerts using Splunk SIEM.
- Perform initial alert triage and identify suspicious activities.
- Configure and monitor alerts for repeated failed logins, unauthorized access, and anomalous activity.
- Collect investigation evidence, logs, screenshots, and relevant artifacts.
- Document incidents, investigation steps, timestamps, and findings.
- Create, update, and track security incident tickets using BMC Remedy or similar tools.
- Escalate complex or high-risk incidents to L2/L3 teams.
- Perform routine security platform checks and follow SOC standard operating procedures.
- Maintain shift handover notes and comply with incident response SLAs.
Must-Have Skills
- Splunk Power User skills and relevant user certifications.
- Basic SPL searches, dashboards, reports, and alert configuration.
- SIEM monitoring and security event analysis.
- Incident documentation and evidence collection.
- Ticket handling, escalation, and communication skills.
Nice-to-Have Tools
CrowdStrike, Microsoft Office 365, Palo Alto, IBM QRadar, Cisco security devices/firewalls, and BMC Remedy. The exact Strada Cloud product name needs confirmation.
Candidate Preferences
- Candidates from Chennai willing to travel or relocate to Hyderabad.
- Freshers with strong practical SIEM knowledge and lab experience.
- Willingness to work rotational or night shifts, if required.