SOC Analyst ( L1 / L2 )
Amvion Labs · Chennai · onsite · Posted 27d ago
Undisclosed1–2 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Summary
Key Responsibilities
Required Skills and Qualifications
Good to Have (Optional):
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
We are looking for a motivated SOC Analyst with 12 years of hands-on experience to join our Security Operations team. You will be responsible for real-time monitoring, detection, and initial response to security incidents across client environments, helping protect infrastructure and data from evolving cyber threats.
Key Responsibilities
- Monitor security alerts and events via SIEM tools (eg, Splunk, QRadar, ELK, Microsoft Sentinel) on a 24x7 shift basis.
- Perform initial triage, investigation, and classification of security incidents (true positive/false positive).
- Escalate confirmed incidents to L2/L3 analysts or incident response teams per defined SOPs.
- Monitor endpoint, network, and cloud security tools (EDR, IDS/IPS, firewalls, proxy logs).
- Document incidents, findings, and actions taken in ticketing systems.
- Conduct log analysis to identify indicators of compromise (IOCs) and suspicious patterns.
- Support vulnerability management by tracking and validating remediation.
- Assist in threat intelligence gathering and applying it to detection use cases.
- Follow and help refine standard operating procedures (SOPs) and playbooks.
- Coordinate with client stakeholders during active incidents, as needed.
Required Skills and Qualifications
- Bachelors degree in Computer Science, IT, or related field (or equivalent practical experience).
- 12 years of experience in a SOC, NOC, or cybersecurity monitoring role.
- Working knowledge of SIEM platforms, log analysis, and alert triage.
- Understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls, VPNs).
- Familiarity with common attack techniques (phishing, malware, brute force, DDoS) and the MITRE ATT&CK framework.
- Basic knowledge of OS internals (Windows/Linux) and security event logs.
- Strong analytical and problem-solving skills with attention to detail.
- Good written and verbal communication skills for incident documentation and escalation.
- Ability to work in rotational shifts (24x7 SOC environment).
Good to Have (Optional):
- Certifications such as CompTIA Security+, CEH, or SOC Analyst certifications (eg, GCIH, Splunk certs).
- Exposure to cloud security monitoring (AWS/Azure).
- Scripting basics (Python/PowerShell) for automation of repetitive tasks.
- Experience with ticketing tools (ServiceNow, Jira).
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
AutomationDevopsCyberDNSfirewallsIncident Responseamazon web servicesipscehclassificationGCIHddosEndpointAnalyticsData AnalyticsCompTIA SecurityCompTIAJira AtlassiancloudCloud SecurityCyber SecurityCommunication SkillsMicrosoft AzureLinux