Soc Analyst

NEC Corporation; Dadri; Hybrid; INR 600,000 - 900,000; Full time

Job summary

NEC Corporation in Dadri is seeking a security operations professional to monitor and validate alerts from Microsoft Sentinel and Defender XDR. The role involves initial investigations, threat assessment, and coordinating with L2/L3 teams to mitigate risks.

You will log actions for traceability, identify false positives to reduce noise, and contribute to runbooks and SOP improvements. Candidates should have hands-on security tool exposure and relevant certifications.

Qualifications

• Experience in monitoring security environments and validating alerts.
• Ability to classify incidents by severity, impact, and asset criticality.
• Familiarity with SOC playbooks and ITSM ticketing workflows.

Responsibilities

• Continuously monitor customer environments for alerts.
• Perform initial investigation to determine legitimacy and impact.
• Coordinate with L2/L3 and onshore teams during escalations.
• Log actions with clear justification for auditability and traceability.
• Maintain and update SOPs, Runbooks and playbooks based on findings.

Skills

Security monitoring

Incident response

SOC coordination

Tools

Microsoft Sentinel

Microsoft Defender XDR

ServiceNow

Job description

Key Responsibilities-

• Continuously monitor customer environments for alerts generated via Microsoft Sentinel and Microsoft Defender XDR
• Perform initial investigation and validation of alerts to determine legitimacy and potential impact.
• Conduct threat assessment and contextual analysis using available telemetry, logs, and threat intelligence.
• Classify and prioritize alerts based on severity, asset criticality, and business impact.
• Execute first-level response actions as per approved SOPs and playbooks (e.g., containment, enrichment, ticket updates) to mitigate the risk and resolve the alert.
• Log clear justification for actions taken, ensuring traceability and audit readiness
• Identify false positives and reduce alert noise through structured validation and coordination with L2 team.
• Regularly update and maintain the SOPs, Runbooks and Playbooks based on analysis and investigation outcomes.
• Provide detailed feedback and recommendations to L2 SOC for rule tuning and optimization
• Escalate incidents to Tier 2 / Tier 3 / Onshore SOC based on severity and impact
• Provide comprehensive shift handover with full technical and operational context
• Coordinate with onshore SOC, incident response, engineering, and customer teams during escalations
• Perform post-fix monitoring to confirm service stability
• Maintain accurate incident records, timelines, evidence, audit trails, and CI updates in the ticketing system

SOC & Security Tool Exposure (Customer Environments)

Candidates should have hands-on exposure or working knowledge of one or more of the following:

• Microsoft Sentinel
• Microsoft Defender XDR
• ITSM / Ticketing Tools
• ServiceNow

Preferred Certifications (Good to Have)

• CompTIA Security+
• Microsoft SC-200 / SC-900
• Any SOC / SIEM / XDR related certification