SOC Officer

Job Description

This individual will perform the role of Tier1 security analyst in a 24x7 Security Operations Center responsible for monitoring the workplace for potential security threats and incidents. This will include the identification, triaging, analysis, threat-hunting, incident investigation and support of remediation recommendations to mitigate the security threats and incidents.

Monitors, analyzes and responds to security events in timely manner

- - Operate on a 12-hour shift basis (24x7 coverage) to continuously monitor security alerts in SIEM platforms for potential security incidents.
- Triage and prioritize alerts based on severity, impact, and organizational risk.Perform initial analysis to validate alerts, determine legitimacy, and escalate confirmed or suspicious incidents as necessary.
- Track and analyze suspicious network, application, and user behavior to identify anomalies and threats.
- Ensure timely escalation of incidents to customers in accordance with defined SLAs, maintaining clear communication and updates throughout the incident lifecycle.
- Collaborate with L2 analysts for in-depth investigation, containment, and resolution of security incidents.
- Utilize ticketing systems to log, track, and manage incidents through to closure, ensuring proper documentation and audit trail.




- Participate in incident response activities in alignment with the predefined Incident Response Plan and playbooks.
- Adhere to Standard Operating Procedures (SOPs) for alert handling, escalation, and communication.Maintain awareness of current threats, vulnerabilities, and emerging attack techniques that may impact the organization.

Qualification

- Bachelor's degree in computer science, Cybersecurity, or a related field.0-2 years of experience in SOC, IT support, network administration, or a related field with exposure to security concepts.
- Experience in monitoring and responding to security incidents.
- Familiarity with security tools such as SIEM platforms, especially Azure Microsoft Sentinel or Elastic SIEM
- Strong analytical and problem-solving skills.

Job Comments

Skills required

- Proficiency in KQL and other query languages for threat analysis.
- Familiarity with MITRE ATT&CK; framework and its application in threat detection.
- Strong knowledge of incident response processes and security monitoring tools.
- Ability to handle high-severity incidents and make quick decisions under pressure.
- Required to work on a 12-hour shift rotation

Level : Grade 1

NP: Immediate joiners – 15 days

Years of Exp : 1 - 2 yrs

Position Type : Perm

Location: Bangalore

📌 SOC Officer (Bengaluru)
🏢 Crimsonlogic
📍 Bengaluru