SOC Analyst

Robosoft Technologies Inc; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Robosoft Technologies Inc is seeking an experienced security professional to join as a Security Operations role, focusing on incident investigation, threat analysis, and cross-team remediation coordination.

The candidate will analyze escalated alerts, perform root-cause analysis, and develop incident response playbooks while working in a hybrid setup across Bengaluru and Udupi. Knowledge of SIEM, EDR, and cloud security is essential.

Qualifications

• Hands-on experience with Monitoring and SIEM tools.
• Strong knowledge of firewall technologies (Fortinet preferred).
• Experience with EDR/XDR/DLP tools (CrowdStrike).
• Understanding of TCP/IP, DNS, HTTP/S, SSL, VPN.
• Experience in Azure AD / M365 security monitoring.
• Familiarity with MITRE ATT&CK framework.
• Basic scripting knowledge (PowerShell / Python preferred).

Responsibilities

• Investigate and analyze escalated security alerts from L1 analysts.
• Perform root cause analysis and incident validation.
• Conduct threat hunting and identify Indicators of Compromise.
• Analyze firewall, VPN, endpoint, cloud, AI and identity logs.
• Handle phishing, malware, ransomware, and suspicious activity investigations.
• Tune SIEM rules and reduce false positives.
• Develop and update incident response playbooks.
• Coordinate with IT teams for containment and remediation.
• Prepare detailed incident reports and post-incident analysis.
• Participate in shift rotation.

Skills

Monitoring and SIEM

Fortinet firewall

CrowdStrike (EDR)

TCP/IP DNS HTTP/S VPN

Azure AD / M365 security

MITRE ATT&CK

PowerShell / Python

Education

CEH

SC-200 (Microsoft Security Operations)

AZ-500 (Azure Security Engineer)

Tools

Fortinet

CrowdStrike

Azure AD

M365

EDR/XDR/DLP tools

Job description

We are excited to find an experienced and motivated individual to join our team and help us drive a successful project outcomes.

Udupi

Hybrid

Bengaluru

Udupi

Hybrid

| Experience: 3–5 Years | Vacancy: 1

Job Summary

The candidate will be responsible for advanced incident investigation, threat analysis, root cause identification, and coordination with internal teams for remediation. The role requires strong analytical skills and hands-on experience with SIEM, EDR, AI and network security tools.

Key Responsibilities

• Investigate and analyze escalated security alerts from L1 analysts
• Perform root cause analysis and incident validation
• Conduct threat hunting and identify Indicators of Compromise
• Analyze firewall, VPN, endpoint, cloud, AI and identity logs
• Handle phishing, malware, ransomware, and suspicious activity investigations
• Tune SIEM rules and reduce false positives
• Develop and update incident response playbooks
• Coordinate with IT teams for containment and remediation
• Prepare detailed incident reports and post-incident analysis
• Participate in shift rotation

Technical Skills Required

• Hands-on experience with Monitoring and SIEM tools
• Strong knowledge of firewall technologies (Fortinet preferred)
• Experience with EDR/XDR/DLP tools (CrowdStrike)
• Understanding of TCP/IP, DNS, HTTP/S, SSL, VPN
• Experience in Azure AD / M365 security monitoring
• Familiarity with MITRE ATT&CK framework
• Basic scripting knowledge (PowerShell / Python preferred)

Cloud & Identity Security

• Monitor Azure / AWS cloud security alerts
• Investigate risky sign-ins and identity-based attacks
• Knowledge of Conditional Access and MFA security policies

AI Security

• Basic understanding of Generative AI and AI security risks
• Knowledge of AI data protection, access control, and security governance
• Understanding of prompt injection, sensitive data exposure, and AI tool security
• Ability to monitor and investigate AI-related security events and policy violations

Certifications (Preferred)

• CEH
• SC-200 (Microsoft Security Operations)
• AZ-500 (Azure Security Engineer)

Soft Skills

• Strong analytical and problem-solving skills
• Ability to handle high-severity incidents
• Good communication and documentation skills
• Team collaboration and mentoring ability