Senior Engineering, Security - R01565242

Brillio; Bengaluru; On-site; INR 400,000 - 640,000; Full time

Job summary

Brillio in Bengaluru seeks a SOC L1 Analyst to monitor security alerts, perform initial triage, and escalate incidents to SOC L2/L3. You will document timelines, track incidents, and ensure SLA compliance within an enterprise SOC.

You should have foundational knowledge of cybersecurity operations, networking concepts, SIEM monitoring, and endpoint security, with exposure to Microsoft Sentinel and Defender XDR in a hands-on role.

Qualifications

• 0–2 years of experience in SOC, IT support, networking, or cybersecurity operations.
• Freshers with cybersecurity certifications and strong networking fundamentals may also apply.
• Experience in major operating systems (Windows, Linux)
• Entry level Security, Network or System related certifications

Responsibilities

• Monitor security alerts and events from SIEM, EDR/XDR, firewalls, email security tools, and other security tech.
• Perform initial triage and validation of security alerts and incidents.
• Identify suspicious activities, anomalies, and potential threats.
• Escalate confirmed or high-severity incidents to SOC L2/L3 teams as per escalation procedures.
• Track and document incidents in ticketing and case management systems.
• Ensure incidents are handled within defined SLAs and procedures.
• Assist in validating log ingestion and connector health.

Skills

Microsoft Sentinel

Defender for Endpoint

Defender for Office 365

Defender for Identity

Defender for Cloud

Firewall

VPN

Proxy

DNS

Email Security

EDR

AD

Networking basics

Log collection

Incident documentation

Escalation procedures

Tools

SIEM

Job description

Tech Specialist, Security

Job requirements

Security Operations Center (SOC) L1 Analyst – Job Description Job Title SOC Analyst – Level 1 (L1), Information Security / Cybersecurity Job Summary

We are seeking a motivated and detail-oriented SOC L1 Analyst to join the Security Operations Center team. The SOC L1 Analyst will be responsible for continuously monitoring security alerts, performing initial analysis and triage of security events, and escalating confirmed or high-risk incidents to higher-level analysts. The ideal candidate should possess foundational knowledge in cybersecurity operations, networking concepts, SIEM monitoring, and endpoint security technologies, with exposure to Microsoft Sentinel and Microsoft Defender XDR. This role is ideal for candidates looking to build hands-on experience in cyber defense, security monitoring, and incident response operations within an enterprise SOC environment.

Key Responsibilities

• Monitor security alerts and events generated from SIEM, EDR/XDR, firewalls, email security tools, and other security technologies.
• Perform initial triage and validation of security alerts and incidents.
• Identify suspicious activities, anomalies, and potential security threats.
• Escalate confirmed or high-severity incidents to SOC L2/L3 teams as per escalation procedures.
• Track and document incidents in ticketing and case management systems.
• Ensure incidents are handled within defined SLAs and operational procedures.
• Assist in validating log ingestion and connector health.

Technical Skills

• Monitor incidents and alerts within Sentinel dashboards, Defender for Endpoint, Defender for Office 365, Defender for Identity and Defender for Cloud.
• Candidate Should have good knowledge in Firewall, VPN, Proxy, DNS, Email Security, AV/EDR, AD.
• Solid foundational understanding of networking concepts (TCP/IP, LAN/WAN, Internet, network topologies)
• Collect relevant logs and evidence for escalation.
• Maintain accurate incident documentation and timelines.
• Coordinate with IT support and infrastructure teams when required.

Qualifications

• 0–2 years of experience in SOC, IT support, networking, or cybersecurity operations.
• Freshers with cybersecurity certifications and strong networking fundamentals may also apply.
• Experience in major operating systems (Windows, Linux)
• Entry level Security, Network or System related certifications

Soft Skills

• Strong analytical and observation skills
• Willingness to learn continuously
• Good communication and documentation skills
• Ability to work in rotational shifts
• Team-oriented mindset
• Attention to detail and quick response capability