Coralogix- SOC Analyst

Nexthire; Gurugram District; On-site; INR 550,000 - 900,000; Full time

Job summary

A cybersecurity firm is seeking a professional to continuously monitor security alerts and events, investigate potential threats, and assist in incident response activities. This role requires analyzing logs, documenting incidents, and staying updated on emerging cyber threats. Candidates should have experience with SIEM tools and a strong understanding of security processes. This position offers an opportunity to contribute to continuous improvement in security practices.

Qualifications

• Experience with SIEM tools and security platforms.
• Ability to analyze logs from firewalls and endpoints.
• Knowledge of incident response processes.

Responsibilities

• Monitor security alerts continuously and triage them.
• Perform investigations on security events.
• Assist in incident response and documentation.
• Perform initial investigation on security events to determine potential threats or false positives.
• Gather and analyze logs from various sources (firewalls, endpoint security, network devices, applications).
• Document incident findings and escalate critical alerts to senior analysts or Incident Response team.
• Assist in containment, mitigation, and recovery steps under guidance of senior SOC members.
• Participate in incident handling processes and follow defined playbooks/runbooks.
• Support in forensic evidence collection when required.
• Maintain detailed incident tickets with investigation notes and actions taken.
• Prepare periodic reports on alerts, incident trends, and security posture improvements.
• Stay updated with emerging cyber threats, vulnerabilities, and security trends.
• Contribute to refining SOC processes, SOPs, and threat detection mechanisms.

Job description

Roles & Responsibilities:

Monitoring & Alert Handling

• Continuously monitor security alerts and events from SIEM tools and security platforms.

• Identify and categorize suspicious activities, malware alerts, phishing attempts, and intrusion attempts.

• Assist in triaging and prioritizing security alerts based on severity levels.

Investigation & Analysis

• Perform initial investigation on security events to determine potential threats or false positives.

• Gather and analyze logs from various sources (firewalls, endpoint security, network devices, applications).

• Document incident findings and escalate critical alerts to senior analysts or Incident Response team.

Incident Response Support

• Assist in containment, mitigation, and recovery steps under guidance of senior SOC members.

• Participate in incident handling processes and follow defined playbooks/runbooks.

• Support in forensic evidence collection when required.

Security Reporting & Documentation

• Maintain detailed incident tickets with investigation notes and actions taken.

• Prepare periodic reports on alerts, incident trends, and security posture improvements.

Continuous Improvement

• Stay updated with emerging cyber threats, vulnerabilities, and security trends.

• Contribute to refining SOC processes, SOPs, and threat detection mechanisms.