Security Operations Center (SOC) Analyst (L1 / L2)

About Mitigata Mitigata is India's first Security + Compliance + Insurance company, helping businesses mitigate cyber risks through a combination of risk assessments, compliance consulting, cyber insurance, and security solutions. We work with businesses to strengthen their security posture, ensure regulatory compliance, and provide tailored cyber insurance policies to minimize financial exposure from cyber threats. We are backed by a consortium of premier investors, including Nexus Venture Partners, Titan Capital, and WEH Ventures, alongside a global network of industry leaders. Become a part of the first line of defence of digital India.

Our core offerings include :

• Phishing Simulation
• Employee & Organizational Risk Assessment
• Governance, Risk, and Compliance (GRC) Console
• Dark Web and Brand Monitoring
• Threat Intelligence and Response
• Attack surface monitoring As we scale, we are expanding into advanced security verticals such as Email Security, Cloud Security, AI-powered CSPM (Cloud Security Posture Management), DSPM (Data Security Posture Management) , Breach simulation and AI SOC. We are shipping cybersecurity products from India for the world.

Security Operations Center (SOC) Analyst (L1) Mitigata | Full-time | Bangalore , India

The Role: The primary function of the SOC Analyst (L1) is the hands-on analysis and detailed investigation of security events impacting our clients. This is a shift-based role within our 24/7 Cyber Force, where you will be a cornerstone of our service delivery. Reporting to the SOC Manager, you will be on the front lines, utilizing our advanced SIEM and SOAR toolsets to detect, investigate, and respond to threats across our clients' diverse IT environments. This is an ideal opportunity for a motivated candidate looking to build their career in a fast-paced, expert security environment.

What You'll Be Doing (Duties and Responsibilities): ● Work in a 24/7 rotational shift environment to provide continuous monitoring of security alerts and incidents. ● Analyze and triage alerts from SIEM, SOAR, EDR, and other threat detection platforms. ● Identify patterns and indicators of potential security threats, both successful and unsuccessful intrusion attempts. ● Create and maintain detailed, high-quality incident tickets and documentation. ● Support the development and tuning of SOC Use Cases and detection logic. ● Assist in proactive threat hunting activities, helping identify IOCs that bypass automated detection. ● Participate in root cause analysis and draft post-incident review reports with improvement recommendations. ● Ensure SLA adherence and meet all operational KPIs defined by the SOC Manager. ● Contribute to the preparation of monthly and quarterly reports for clients.

What You'll Bring (Skills, Qualifications, and Experience): ● Experience: Minimum of 1.5 - 3 years of experience in the IT security industry, preferably working in a SOC/NOC environment. ● Certifications: A degree/diploma in a technology field is preferred. Highly desired certifications include:SC-200, SC-900, PenTest+, Security+, CCSP, CEH, GMON. ● Shift Work: Willingness to work from our Bangalore office in a 24/7 shift-based operation.

Technical Skills: ● SIEM/SOAR: Must have hands-on experience with a major SIEM tool (e.g., Microsoft Sentinel, Splunk, IBM QRadar). ● Cloud: Direct experience with major cloud platforms (e.g., Microsoft Azure, AWS). ● Networking: Strong expertise in TCP/IP network traffic and event log analysis. ● Operating Systems: Administrative skills in multiple operating systems (Windows, macOS, and/or Linux). ● Scripting & Queries: Proficient in basic scripting (e.g., Python, PowerShell) and familiar with log-searching query languages (e.g., KQL, Splunk SPL). ● Process: Knowledge of ITIL disciplines, particularly Incident, Problem, and Change Management.

General Characteristics: ● A collaborative team player with the discipline to work independently. ● Strong analytical and investigative mindset. ● Confidence to handle common security incidents independently while knowing when to escalate. ● A strong aptitude for and proficiency in quickly learning new technologies and security tools. ● Superior communication skills (both written and verbal) to effectively interact with clients and internal teams. ● Exceptional analytical and problem-solving abilities. ● Excellent attention to detail and a commitment to quality. ● Fast learner with a passion for continuous improvement and learning.

SOC Analyst – L2 (Senior Analyst/Responder) Mitigata | Full-time | Bangalore , India

The Role: As the SOC Analyst (L2) - Senior Analyst/Responder, you will serve as a critical escalation point and technical lead within our 24/7 Cyber Force. You will go beyond alert triage to lead complex incident investigations, perform deep-dive analysis, and coordinate the full response lifecycle for our clients. This role is for a seasoned analyst who can not only resolve complex threats but also mentor junior analysts and enhance our security operations. You will be a key player in coordinating with client IT and security teams, acting as a trusted advisor during critical security events and ensuring a swift, effective resolution.

Responsibilities: ● Lead and own high-severity incident investigations and remediation ● Correlate data from EDR, SIEM, packet captures, and cloud logs ● Perform threat hunting and root cause analysis ● Develop, test, and tune detection rules/use cases ● Create and maintain IR documentation, SOPs, and playbooks ● Coordinate with client IT/security teams during incidents ● Deliver client reports summarizing security posture and incident trends ● Provide mentorship to SOC L1 and Junior L2 analysts ● Actively contribute to platform optimization and threat detection strategies ● Participate in 24/7 shift rotation, especially during peak threat hours ● Collaborate cross-functionally to ensure incident continuity and rapid response

What You'll Bring (Skills, Qualifications, and Experience): ● Experience: Minimum of 3-5 years of experience in the IT security industry, with at least 2 years in a hands-on SOC role. ● Education: BE/B.Tech/M.Tech/MSc/MCA qualification or equivalent is preferred. ● Certifications: Highly desired certifications include: GCFA, GCFE, GCIH, CYSA+, CISSP,, AZ-500.

Technical Skills: ● Incident Response: In-depth, hands-on experience in incident management and response, including host and network forensics. ● SIEM/SOAR: Advanced knowledge and hands-on expertise with Microsoft Sentinel (or equivalent SIEM/SOAR platforms). ● Analysis: Ability to perform basic malware analysis or reverse engineer attacks to understand actions and intent. Advanced skills in network traffic analysis and understanding of suspicious vs. normal activity. ● Threat Hunting: Ability to discover hidden threats and TTP ● Cloud Security: Strong experience with securing cloud platforms (AWS and/or Microsoft Azure). ● Security Concepts: Expert understanding of the cyber-attack lifecycle, threat vectors, and risk management. ● Tooling: Proficiency with a wide range of security tools, including EDR, NIPS/NIDS, Packet Analysis tools, and Vulnerability Scanners. ● Process: Deep knowledge of ITIL disciplines, particularly Incident, Problem, and Change Management. Across all levels, analysts are expected to: ● Participate in rotating shifts including nights, weekends, and holidays ● Document and communicate shift handovers clearly and effectively ● Maintain vigilance during high-risk hours and threat alerts ● Collaborate cross-functionally to ensure incident continuity and rapid response ● Be accountable for maintaining service SLAs and operational excellence

Why Join Mitigata? Because every data breach, every ransomware attack, every compliance fine—threatens India’s digital backbone. We’re building India’s first cyber shield, blending security + insurance + compliance into one powerful layer. Your code won’t just power applications—it will help defend a nation. Apply Now: keka.m@mitigata.com Subject: Security Operations Center (SOC) Analyst – Bangalore