Job Summary

Key Responsibilities
Monitor security alerts and events using SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight, or LogRhythm.
Perform real-time security event analysis and triage security incidents.
Investigate suspicious activities, malware infections, phishing attempts, and unauthorized access attempts.
Analyze logs from endpoints, servers, firewalls, IDS/IPS, EDR, and cloud environments.
Escalate security incidents based on severity and follow established incident response procedures.
Work closely with L2/L3 SOC teams, IT teams, and stakeholders during incident investigations.
Perform threat hunting and identify Indicators of Compromise (IOCs).
Support vulnerability management by validating findings and assisting with remediation efforts.
Monitor endpoint protection solutions such as Microsoft Defender, CrowdStrike, SentinelOne, or Carbon Black.
Assist in creating and updating incident response documentation, SOPs, and knowledge base articles.
Participate in security audits, compliance activities, and post-incident reviews.




Maintain accurate incident documentation and prepare daily/weekly security reports.

Required Skills:
2+ years of experience in a Security Operations Center (SOC) workplace.
Hands-on experience with SIEM tools (Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, LogRhythm, etc.).
Valuable understanding of Incident Response, Threat Detection, and Security Monitoring.
Experience with EDR/XDR solutions such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne.
Knowledge of TCP/IP, DNS, HTTP/HTTPS, VPN, Active Directory, and Windows/Linux operating systems.
Understanding of the MITRE ATT&CK; Framework and Cyber Kill Chain.
Basic scripting knowledge using PowerShell, Python, or Bash is an advantage.
Familiarity with cloud security monitoring (AWS, Azure, or GCP) is preferred.
Robust analytical, troubleshooting, and problem-solving skills.
Excellent written and ver

📌 Soc Analyst Thane
🏢 Silgate Solutions
📍 Thane