SoC Analyst

QualityAI; Bengaluru; On-site; INR 600,000 - 900,000; Full time

Job summary

QualityAI in Bengaluru (Bangalore) is seeking a SOC Engineer (0-4 years) to monitor security events, manage alerts, and perform initial incident qualification. You will work with SIEM platforms and endpoint security to ensure rapid detection and response to cybersecurity threats.

This role requires a 0–4 year track record, a Bachelor's degree with CEH, and willingness to work 24x7 in rotational shifts within a dynamic security operations team.

Qualifications

• Bachelor's degree with CEH certification is required.
• Experience with security monitoring and incident handling is preferred.
• Understanding of ITIL processes (Incident, Problem, Change) is beneficial.

Responsibilities

• Monitor, acknowledge, analyze, and validate security incidents generated through SIEM platforms and other reporting channels.
• Perform initial incident triage, investigation, and qualification of security alerts.
• Collect and analyze logs required for incident containment and security investigations.
• Escalate validated security incidents to the SOC Lead/Manager per defined procedures.
• Conduct first-level false positive/false negative analysis.
• Analyze logs from Firewalls, IDS/IPS, Windows Servers, Cisco devices, Endpoint Security, Email Security, and Anti-malware solutions.
• Create and manage incident tickets in ITSM tools with accurate documentation.
• Track incidents through closure with timely updates to stakeholders.
• Report infrastructure or security tool issues to IT support teams.
• Support security operations activities and adhere to SLA and incident response procedures.

Skills

Analytical skills

Troubleshooting

Communication skills

Cybersecurity fundamentals

Education

Bachelor's Degree with CEH Certification

Tools

McAfee EDR

CrowdStrike

McAfee ENS

DLP

CASB

LogRhythm

McAfee ESM

Job description

SOC Engineer (0-4 Years) | Bangalore | Immediate Joiners

SOC Engineer (0-4 Years) | Bangalore | Immediate Joiners

Location: Bangalore (100% Work from Office)

Experience: 0-4 Years

Shift: Rotational Shifts

Notice Period: Immediate Joiners Preferred

Qualification: Bachelor's Degree with CEH Certification

About The Role

We are looking for a SOC Engineer to monitor security events, perform alert management, conduct initial incident qualification, and escalated confirmed security incidents to the SOC Manager. The role involves working closely with security monitoring tools, SIEM platforms, and endpoint security solutions to ensure timely detection and response to cybersecurity threats.

Key Responsibilities

• Monitor, acknowledge, analyze, and validate security incidents generated through SIEM platforms and other reporting channels.
• Perform initial incident triage, investigation, and qualification of security alerts.
• Collect and analyze logs required for incident containment and security investigations.
• Escalate validated security incidents to the SOC Lead/Manager as per defined procedures.
• Conduct first-level false positive and false negative analysis.
• Analyze logs from various sources including Firewalls, IDS/IPS, Windows Servers, Cisco devices, Endpoint Security, Email Security, and Anti-malware solutions.
• Create and manage incident tickets in ITSM tools, ensuring accurate documentation of alerts, indicators, and investigation findings.
• Track incidents through closure while providing timely updates to stakeholders.
• Report infrastructure or security tool issues to the relevant IT support teams.
• Support security operations activities and adhere to established SLA and incident response procedures.

Required Skills & Experience

• Hands-on experience with security solutions such as McAfee EDR, CrowdStrike, McAfee ENS, DLP, CASB, and other security technologies.
• Experience working with SIEM platforms such as LogRhythm and McAfee Enterprise Security Manager (ESM).
• Basic understanding of SIEM administration and correlation rule creation.
• Strong knowledge of TCP/IP networking, network traffic analysis, and event log analysis.
• Understanding of cybersecurity monitoring, threat detection, and incident response processes.
• Knowledge of ITIL practices, including Incident, Problem, and Change Management.
• Good analytical, troubleshooting, and communication skills.

Preferred Qualifications

• CEH (Certified Ethical Hacker) certification.
• Exposure to SOC operations, incident handling, and security monitoring processes.
• Ability to work effectively in a 24x7 rotational shift environment.