L1 SOC Security Analyst (SIEM / SOAR / UEBA)

Black Box; Gurugram District; On-site; INR 600,000 - 900,000; Full time

Job summary

Black Box is seeking a SOC Analyst to monitor SIEM, SOAR, and UEBA platforms on a 24x7 basis, handling security events and alerts. You will perform initial triage, validate incidents, and classify alerts per SOPs.

Based in Gurugram, India, you will coordinate with IT and security teams during incident response, maintain investigation records, ensure platform health, and verify automated playbooks while upholding SLAs and documentation standards.

Responsibilities

• Monitor SIEM, SOAR, and UEBA platforms on a 24×7 basis for security events and alerts.
• Perform initial triage, validate security incidents, and classify alerts based on SOPs.
• Monitor log collection, platform health, automation workflows, and data ingestion status.
• Create and update incident tickets, maintain investigation records, and prepare operational reports.
• Escalate confirmed security incidents, failed automation workflows, and anomalous user activities to the L2 team.
• Coordinate with IT and security teams during incident response and service restoration.
• Verify the successful execution of automated playbooks and security workflows.
• Adhere to SOC processes, SLAs, escalation matrix, and documentation standards.

Job description

• Monitor SIEM, SOAR, and UEBA platforms on a 24×7 basis for security events and alerts.
• Perform initial triage, validate security incidents, and classify alerts based on SOPs.
• Monitor log collection, platform health, automation workflows, and data ingestion status.
• Create and update incident tickets, maintain investigation records, and prepare operational reports.
• Escalate confirmed security incidents, failed automation workflows, and anomalous user activities to the L2 team.
• Coordinate with IT and security teams during incident response and service restoration.
• Verify the successful execution of automated playbooks and security workflows.
• Adhere to SOC processes, SLAs, escalation matrix, and documentation standards.