SoC Analyst

Quality Ai; Bengaluru; On-site; INR 450,000 - 650,000; Full time

Job summary

QualityAI is seeking a SoC Analyst to monitor, analyze, and validate security incidents from SIEM and various reporting channels. You will collect logs, escalate confirmed incidents to the SOC Lead, and perform early false positive/negative analysis to support containment and investigations.

The role requires familiarity with ITIL Incident/Problem/Change management and hands-on experience with SIEM tools like LogRhythm and McAfee. Immediate joining and Bangalore office residency are expected.

Qualifications

• Bachelor's degree in related field with CEH certification.
• Experience with SIEM tools (LogRhythm, McAfee) and basic rule creation.
• Ability to analyse logs from different sources (FW, IDS, Windows DC, Cisco, AV).
• Familiarity with ITIL processes: Incident, Problem, Change management.

Responsibilities

• Monitor, analyse, and validate incidents from SIEM and other reporting channels.
• Collect logs to aid containment and investigations.
• Escalate validated incidents to SOC Lead.
• Conduct initial false positive/false negative analysis.
• Open incidents in ITSM with logs, alarms, and indicators.
• Track incidents and updates based on client feedback.
• Report infrastructure issues to IT support.

Skills

TCP/IP analysis

Incident management

ITIL disciplines

Security incident analysis

Education

Bachelor's degree with CEH certification

Tools

McAfee EDR

CrowdStrike

ENS

DLP

CASB

SIEM

LogRhythm

Job description

SoC Analyst

Date: 7 Sept 2026

Company: QualityAI

Country/Region: IN

Job Description:

• Acknowledge, analyse, and validate incidents triggered from correlated events through SIEM solution
• Acknowledge, analyse, and validate incidents received through other reporting mechanisms such as email, phone calls, management directions, etc.
• Collection of necessary logs that could help in the incident containment and security investigation
• Escalate validated and confirmed incidents to SOC Lead
• Undertake first stages of false positive and false negative analysis
• Understand the structure and the meaning of logs from different log sources such as FW, IDS, Windows DC, Cisco appliances, AV and antimalware software, email security etc.
• Open incidents in ITSM Platform to report the alarms triggered or threats detected. Analyst should properly include for each incident on SIEM all details related to the logs, alarms and other indicators identified in accordance with the intervention protocol and the SLA.
• Track and update incidents and requests based on client's updates and analysis results
• Report infrastructure issues to the IT support team.

Other duties related to the position

Essential Skills

• Knowledge and hands-on experience in the management of McAfee EDR, CrowdStrike, ENS, DLP, CASB and other security products
• Experience in Security Information Event Management (SIEM) tools like LogRhythm and McAfee, creation of basic co-relation rules, and administration of SIEM
• Should have expertise on TCP/IP network traffic and event log analysis
• Knowledge of ITIL disciplines such as Incident, Problem and Change Management

Expectations

• Exp 0 - 4 years SOC Engineer will be responsible for monitoring, reporting, and escalating events to our SOC Manager.
• The primary function of this position is to monitor the analytics tools, perform alert management, and initial incident qualification.
• This role reports to the SOC Manager.
• Bachelor's degree with CEH certification.

Joining time / Notice Period: Immediate joining

Shift Timings: Rotational Shifts (100% working from Bangalore office)