SOC Analyst

Job Title

Security Operations Center (SOC) Analyst

About the Department

Information Security - Security Operations Center (SOC). The SOC is the front line of Sagility’s cyber-defense, providing 24x7 monitoring, detection, triage, incident response and threat analysis across all operating geographies (India, Philippines, Jamaica, Colombia and the USA).

Job Role

A hands-on Security Operations resource responsible for monitoring, analyzing and responding to security events and incidents, spanning Tier 1 (monitoring & triage) and Tier 2 (investigation & response) activities. Key focus areas:

• Daily events log analysis and security alerts/alarm handling from the SIEM.
• Monitor and analyze IPS threat feeds, endpoints, network, cloud and email for indicators of compromise.
• Triage, investigate and drive incidents to closure with zero misses and 100% SLA adherence.
• Conduct forensic triage and support vulnerability assessment closure.

Shift

Rotational shifts, including night shifts, to support 24x7 SOC coverage

Location

India (Bangalore preferred) - supporting Sagility’s SOC operations globally

Responsibilities

Responsibilities grow in depth and autonomy from Tier 1. Common duties apply for the Tier 1 sections define clear demarcation.

• Protect the organization’s assets by upholding the principles of the Quality Information Security Management System (QISMS).
• Ensure confidentiality, integrity and availability of information, that is critical to Sagility’s business functions and client commitments.
• Report information-security incidents, losses, weaknesses and malfunctions to the right authority without any delay.
• Participate in training, orientation and awareness programs pertaining to QISMS and SOC processes.

Tier 1 (Level 1) - Monitoring & Triage Focus

• Perform daily events log analysis and monitor security alerts/alarms from the SIEM.
• Monitor closure of Critical Events and Security Alerts and notify concerned groups - targeting zero misses and 100% SLA.
• Perform daily and monthly review and analysis of IPS (e.g., Cisco Firepower) threat feeds and flag notable/reported threats and possible intrusions.
• Prepare and analyze daily monitoring reports for Sagility sites, servers and network devices (100% compliance).
• Create ad-hoc analysis of unusual events and user activities, or upon request by concerned groups or departments.
• Escalate validated incidents to Tier 2 with complete context per defined runbooks and SLAs.

Qualifications

• Graduate of a 4 to 5-year course - Computer Science, Information Technology, Engineering or any IT-related course.
• A strong internal drive for pursuing continuous learning and improvement.

Tier 1 Analyst

• 2 to 5 years of experience in a SOC, NOC, IT security or related monitoring function (freshers with relevant internships / certifications considered).
• Basic understanding of security monitoring, SIEM concepts, and incident-handling fundamentals.
• Certification (any one, preferred): CompTIA Security+, ISC2 Certified in Cybersecurity (CC), any SOC Analyst certificate, any Cisco security certificate, Microsoft SC-900.

Tools / Applications

• SIEM platforms, IPS/IDS (e.g., Cisco Firepower), EDR, vulnerability scanners, email-security and cloud-security tooling; MS Office, Visio and ticketing systems.