Soc Analyst 1

ValuePoint; Chennai; On-site; INR 450,000 - 750,000; Full time

Job summary

ValuePoint is seeking a Level 1 SOC Analyst in Chennai for 1-2 years of security operations experience. The role focuses on analyzing alerts, investigating events from SIEM/EDR/Firewall, and supporting incident response activities.

You will conduct logs analysis, identify false positives, assist threat hunting, and coordinate with client teams for incident remediation while maintaining SOC documentation and updating SIEM use cases.

Qualifications

• Hands-on experience with SIEM tools (Splunk, QRadar, Securonix, FortiSOAR).
• Experience with EDR solutions (CrowdStrike, Defender, Carbon Black).
• Strong knowledge of TCP/IP, networking concepts and security fundamentals.
• Understanding of malware analysis, phishing analysis and endpoint investigation.
• Knowledge of MITRE ATT&CK framework and incident response lifecycle.
• Basic scripting knowledge (PowerShell / Python) is an added advantage.

Responsibilities

• Perform in-depth analysis of security alerts and incidents.
• Investigate security events from SIEM, EDR, Firewall, IDS/IPS, WAF, Proxy and other security tools.
• Conduct log analysis and identify false positives or potential threats.
• Support threat hunting and proactive monitoring activities.
• Coordinate with customers internal teams for incident resolution and remediation.
• Prepare incident reports and maintain documentation as per SOC processes.
• Fine-tune SIEM use cases and assist in rule optimization.

Skills

SIEM tools

EDR tools

Networking fundamentals

Malware analysis

MITRE ATT&CK

Incident response

Scripting: PowerShell/Python

Tools

Splunk

QRadar

Securonix

FortiSOAR

CrowdStrike

Microsoft Defender

Carbon Black

Job description

Job Description:

Role: Level 1 SOC Analyst

Experience: 1-2 Years

Location: Chennai

Key Responsibilities:

• Perform in-depth analysis of security alerts and incidents.


• Investigate security events from SIEM, EDR, Firewall, IDS/IPS, WAF, Proxy and other security tools.


• Conduct log analysis and identify false positives or potential threats.


• Support threat hunting and proactive monitoring activities.


• Coordinate with customers internal teams for incident resolution and remediation.


• Prepare incident reports and maintain documentation as per SOC processes.


• Fine-tune SIEM use cases and assist in rule optimization.

Technical Skills Required:

• Hands-on experience with SIEM tools (e.g., Splunk / QRadar / Securonix / FortiSOAR).


• Experience with EDR solutions (e.g., CrowdStrike / Defender / Carbon Black).


• Strong knowledge of TCP/IP, networking concepts and security fundamentals.


• Understanding of malware analysis, phishing analysis and endpoint investigation.


• Knowledge of MITRE ATT&CK framework and incident response lifecycle.


• Basic scripting knowledge (PowerShell / Python) is an added advantage.

Certifications (Advantage):

• CEH / Security+ / CySA+ or equivalent.