SOC Analyst

Darwinbox Digital Solutions Pvt. Ltd.; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Darwinbox Digital Solutions Pvt. Ltd. is seeking a proactive SOC Analyst to monitor, detect, investigate, and respond to security threats across cloud, endpoint, network, identity, email, and SaaS environments.

You will work across multiple platforms to ensure timely containment and remediation, improving detection engineering and incident response processes. The role requires hands-on SIEM and EDR experience, strong analytical skills, and the ability to collaborate with IT, DevOps, and

Qualifications

• Hands-on experience with SIEM and EDR platforms.
• Strong analytical and investigative skills.
• Understanding of common cyberattack techniques.
• Ability to collaborate with IT, Infrastructure, DevOps, Engineering, and Compliance teams.

Responsibilities

• Monitor and investigate security alerts across SIEM, EDR, email security, WAF, cloud security, and threat intelligence platforms.
• Triage and analyze alerts from multiple sources, including cloud infrastructure logs, identity providers, source code repositories, endpoint telemetry, and web application firewalls.
• Investigate security incidents involving phishing and impersonation attempts, malware infections, suspicious login activity, network scanning, and public exposure of sensitive resources.
• Determine the severity, scope, impact, and potential root cause of security incidents.

Skills

SIEM

EDR

Threat intelligence

Incident response

Detection engineering

Job description

Job Title: SOC Analyst - Security Operations

About the Role

We are looking for a skilled and proactive SOC Analyst to join our Security Operations team. In this role, you will be responsible for monitoring, detecting, investigating, and responding to security threats across cloud, endpoint, network, identity, email, and SaaS environments.

You will work across multiple security platforms to ensure timely identification, investigation, containment, and remediation of security incidents. You will also contribute to improving detection engineering, threat intelligence, incident response processes, and overall security operations capabilities.

The ideal candidate has hands‑on experience with SIEM and EDR platforms, strong analytical and investigation skills, a good understanding of common cyberattack techniques, and the ability to effectively collaborate with IT, Infrastructure, DevOps, Engineering, and Compliance teams.

What You'll Do

Security Monitoring & Incident Response

Monitor and investigate security alerts across SIEM, EDR, email security, WAF, cloud security, and threat intelligence platforms.

Triage and analyze alerts from multiple sources, including cloud infrastructure logs, identity providers, source code repositories, endpoint telemetry, and web application firewalls.

Investigate security incidents involving:

• Phishing and impersonation attempts
• Malware infections
• Suspicious login and authentication activity
• Network scanning and reconnaissance
• Public exposure of sensitive resources
• Compromised accounts and systems

Determine the severity, scope, impact, and potential root cause of security incidents.