SOC Analyst Level 1

• Monitoring of security incidents in 24x7 rotational shifts.
• Detect Incidents by monitoring the SIEM console, Rules, Reports and Dashboards.
• Ensure incidents are reported as tickets using ticketing tool and handled as per SLA defined for each customer. The Standard SLA time to be taken is 10 mins per incident ticket.
• Monitor the SIEM console resources to identify any anomalies.
• Recognize potential, successful, and unsuccessful intrusion attempts/compromises thorough review and analysis of relevant event detail and summary information.
• Report the confirmed incidents to customers and escalate them further to the concerned L2 team.
• Track incident status to closure as per Standard Operating Procedures (SOP) defined.
• first level Triage of events as provided in Standard Operating Procedures and automate analysis if possible.
• Monitor the health of the SIEM tool and create incidents to the engineering team for their action.
• Assist L2 analysts in incident workflow whenever requested.
• Proactively identify vulnerabilities in customer infrastructure environments and suggest updating of SIEM use cases to generate alerts.
• Ensure confidentiality and protection of sensitive customer data.

Requirements

Any post-graduate or undergraduate degree with a passion for cybersecurity looking for a job as a SOC Analyst Level 1. A fantastic opportunity and experience to develop your career. We need innovative and ambitious individuals. This job will develop your skills such as teamwork and innovation as well as provide you with experience and knowledge in the field of cybersecurity.