SOC Analyst (Trainee)

Position summary:

Entry-level analyst on the 247 security monitoring rotation. First responder to alerts in the Exaforce AI SIEM, working strictly from runbooks under the guidance of the shift senior, and building toward independent triage within 6 months.

Key Roles & Responsibilities:

•  Monitor the Exaforce alert queue and acknowledge within SLA; perform first-level triage per documented runbooks.
•  Classify alerts (true/false positive) with evidence and record complete investigation notes in Linear tickets.
•  Escalate per the severity matrix to the shift senior / L2 with accurate context and timelines.
•  Run scheduled health checks on log sources, collectors and dashboards; raise ingestion-gap tickets.
•  Execute clean shift handovers and maintain the shift log.
•  Complete the structured training path (SIEM, cloud audit, identity, network flow fundamentals) and participate in shift drills.

Mandatory Qualifications:

• BE/BTech (CS/IT/E&TC) or equivalent.
• Fundamentals of networking (TCP/IP, DNS, HTTP/TLS) and operating systems (Linux, Windows). 
• Core security concepts: common attack types, malware categories, authentication basics. 
• Clear written English for ticket and handover quality. 
• Committed to 247 rotational shifts including nights and weekends.

Preferred Qualifications:

• CEH, CompTIA Security+, or Google Cybersecurity Certificate.
• CTF / home-lab exposure; basic Python or shell scripting. 
• Cloud fundamentals, ideally GCP.