Responsibilities

- Monitor SIEM alerts for potential security incidents and requests for information, including (but not limited to) real-time channels, tools, dashboards, periodic reports, chat sessions, and tickets.

- Follow incident-specific procedures to perform basic triage of potential security incidentsdetermining their nature and priority, eliminating obvious false positives, and processing requests for information.

- Escalate potential security incidents to senior analysts and implement countermeasures and mitigating controls.

- Monitor and analyze Security Information and Event Management (SIEM) data to identify security issues for remediation.

- Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of relevant event detail and summary information.

- Document all actions taken in the ticketing system and SIEM.

- Prepare periodic reports for clients.

- Work on rotating shifts (three shifts), as we provide 24/7 security services.





Required Qualifications

- Bachelor's degree in Computer Science, Information Security, or a related field

- Genuine interest in cybersecurity and a willingness to learn

- Understanding of networking fundamentals (TCP/IP, DNS, HTTP, common ports and protocols)

- Familiarity with operating system fundamentals across Windows and Linux/Unix

- Strong analytical skills, attention to detail, and the ability to stay composed under pressure

- Valuable communication skills in English

Preferred Qualifications

- Hands-on cybersecurity experience (internships, labs, or personal projects)

- Exposure to SIEM tools (e.g., Splunk, QRadar)

- Familiarity with cloud services such as AWS and Azure

- Scripting experience with Python, Bash, or PowerShell

- Cybersecurity certifications (e.g., CompTIA Security+, CEH)

📌 Soc Analyst 1 (Gurugram)
🏢 Nihon Cyber Defence
📍 Gurugram