About the Role

We are looking for a proactive SOC Analyst (L1) with 3 years of experience in Security Operations to join our Managed Security Services team. The ideal candidate will be responsible for monitoring, triaging, investigating, and escalating security incidents using Microsoft Sentinel while ensuring compliance with defined SLAs and operational procedures.

This role primarily focuses on Microsoft Sentinel monitoring and incident triage, with escalation of complex incidents to the L2 Security Operations team.

Shift Details -
Work Shift: 11:30 PM – 11:30 AM IST (Sunday to Thursday)
Weekends (Fridays and Saturdays) and Public Holidays will be Rotational Shift
Will follow 4 Days Work Week

Key Responsibilities
Monitor security alerts and incidents in Microsoft Sentinel.
Perform initial triage and validate security alerts.
Classify alerts based on severity and business impact.
Investigate suspicious activities using Sentinel logs and dashboards.
Follow documented SOPs, playbooks, and incident response procedures.
Escalate security incidents to L2 SOC analysts within defined SLAs.
Document investigation findings and maintain accurate incident records.




Perform shift handovers with detailed updates on open incidents.
Monitor Microsoft Sentinel health, including data ingestion and connector status.
Identify false positives and report recurring patterns.
Ensure compliance with customer SLAs and response timelines.
Prepare daily operational reports and shift summaries.
Participate in knowledge transfer sessions and continuous process improvement initiatives.

Required Skills - SIEM
- Microsoft Sentinel (Mandatory)
Experience in monitoring and handling Sentinel incidents.

Microsoft Security
Microsoft Defender
Microsoft Entra ID (Azure AD)
Microsoft 365 Security
Azure Monitor
Log Analytics

Security Knowledge
Security Operations Center (SOC) processes
Incident Management
Incident Triage
Threat Detection
Basic malware analysis concepts
Identity and Access Management fundamentals

Tools (Valuable to Have)
Microsoft Defender XDR
Microsoft Defender for Endpoint
Microsoft Defender for Identity
Microsoft Defender for Office 365
ServiceNow
Jira
Microsoft Intune
Azure Portal

📌 Soc Analyst Ahmedabad (India)
🏢 Wishtree Technologies
📍 India