Analyst

Metayb Private Limited; Chennai; On-site; INR 350,000 - 520,000; Full time

Job summary

Metayb is seeking a Junior SOC Analyst (L1) to support a 24×7 Security Operations Center environment in Chennai. The role involves security monitoring, alert investigation, initial triage, log analysis, and incident escalation with hands-on use of SIEM, SOAR, and endpoint security tools.

The position targets candidates with 0–2 years of experience who are eager to learn, adapt to a rotational shift model, and contribute to effective incident response and documentation.

Qualifications

• 0–2 years of experience in SOC or security operations.
• Basic understanding of SIEM platforms and log analysis.
• Familiarity with network fundamentals and operating systems.

Responsibilities

• Monitor security alerts and dashboards via SIEM platforms.
• Perform L1 alert triage and initial incident classification.
• Analyze logs from Windows/Linux servers, AD, and Microsoft 365.
• Identify suspicious activity and potential threats.
• Escalate incidents to Senior SOC Analysts as needed.
• Create and update incident tickets in ITSM systems.
• Support SIEM and SOAR integrations and log source validation.
• Maintain incident records and shift handover notes.
• Assist with vulnerability monitoring and endpoint security alerts.
• Follow SOC procedures and escalation matrices.

Skills

L1 SOC analyst basics

Security monitoring

Alert triage

Incident escalation

Documentation

Analytical thinking

Team collaboration

Learning mindset

Tools

Splunk

Wazuh

Microsoft Defender for Endpoint

Microsoft Sentinel

SOAR

Job description

Job Description – Junior SOC Analyst (L1)

Full-time

24×7 Rotational Shifts

0–2 Years Experience

Job Title: Junior SOC Analyst (L1)

Department: Cyber Security - Security Operations Center (SOC)

Experience: 0–2 Years

Employment Type: Full-time

Reporting To: Senior SOC Analyst / SOC Manager

1. Job Summary

We are looking for a motivated Junior SOC Analyst to support 24×7 Security Operations Center activities, including security monitoring, alert investigation, initial incident triage, log analysis, and incident escalation. The candidate will work with SIEM, SOAR, endpoint security, firewall, identity management, and vulnerability management platforms.

2. Key Responsibilities

• Monitor security alerts, events, and dashboards through SIEM platforms.
• Perform L1 alert triage, initial investigation, and incident classification.
• Analyse security logs from firewalls, Windows/Linux servers, Active Directory, and Microsoft 365.
• Identify suspicious activities, authentication failures, malware alerts, and potential security threats.
• Escalate confirmed or complex incidents to Senior SOC Analysts.
• Create and update incident tickets through ITSM platforms.
• Support SIEM and SOAR integrations, log source validation, and monitoring.
• Maintain incident records, investigation notes, and shift handover reports.
• Assist with vulnerability monitoring and endpoint security alert analysis.
• Follow SOC operational procedures, escalation matrices, and incident response playbooks.

3. Required Technical Skills

• Basic knowledge of SIEM platforms (Wazuh, Microsoft Sentinel, Splunk, or equivalent).
• Understanding of Windows/Linux operating systems and event logs.
• Networking fundamentals: TCP/IP, DNS, VPN, and firewalls.
• Basic knowledge of Active Directory, Microsoft Entra ID, and Microsoft 365.
• Familiarity with endpoint security and EDR solutions.
• Understanding security incidents, MITRE ATT&CK, and common attack techniques.
• Basic knowledge of SOAR and ITSM workflows.
• Familiarity with vulnerability management concepts.
• Must be willing to work in a 24×7 rotational shift environment.
• Shifts will include day, evening, and night rotations.
• Must be available for weekend and public holiday shifts as per the roster.
• Responsible for proper incident documentation and shift handover.
• Follow defined escalation procedures during all shifts.

5. Preferred Certifications

• CompTIA Security+
• Microsoft SC-200
• Recognised SOC / SIEM training certifications.

6. Candidate Expectations

• Good analytical and troubleshooting skills.
• Strong written and verbal communication.
• Ability to investigate and prioritise security alerts.
• Good documentation and reporting skills.
• Teamwork and coordination with L1/L2 analysts.
• Willingness to learn emerging security technologies.

Recruitment Objective: The Junior SOC Analyst will support continuous SOC monitoring and L1 operations, working alongside Senior SOC Analysts to ensure effective alert handling, incident escalation, and uninterrupted 24×7 security monitoring.

Required Skills