Soc Analyst 1

Nihon Cyber Defence; Gurugram District; On-site; INR 400,000 - 700,000; Full time

Job summary

Nihon Cyber Defence is seeking an entry-level Security Operations Analyst in Gurugram to monitor SIEM alerts and assist in triaging security incidents. You will handle information requests, document actions, and create client reports while learning to apply countermeasures under guidance.

The role requires a Bachelor’s degree in a relevant field, a solid understanding of networking and OS fundamentals, and strong English communication.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Genuine interest in cybersecurity and willingness to learn.
• Understanding of networking fundamentals (TCP/IP, DNS, HTTP, common ports and protocols).
• Familiarity with operating system fundamentals across Windows and Linux/Unix.
• Strong analytical skills, attention to detail, and the ability to stay composed under pressure.
• Good communication skills in English.

Responsibilities

• Monitor SIEM alerts for security incidents and information requests.
• Perform basic triage to determine nature and priority, filter false positives, and process requests.
• Escalate incidents to senior analysts and implement countermeasures.
• Monitor and analyze SIEM data to identify issues for remediation.
• Recognize intrusion attempts and compromises from event details.
• Document actions in ticketing system and SIEM.
• Prepare periodic client reports.
• Work on rotating shifts (three shifts) for 24/7 security services.

Skills

Willingness to learn

Analytical thinking

Attention to detail

English communication

Education

Bachelor's degree in Computer Science, Information Security, or a related field

Tools

Splunk

QRadar

Python

Bash

PowerShell

Job description

Responsibilities

• Monitor SIEM alerts for potential security incidents and requests for information, including (but not limited to) real-time channels, tools, dashboards, periodic reports, chat sessions, and tickets.
• Follow incident-specific procedures to perform basic triage of potential security incidents determining their nature and priority, eliminating obvious false positives, and processing requests for information.
• Escalate potential security incidents to senior analysts and implement countermeasures and mitigating controls.
• Monitor and analyze Security Information and Event Management (SIEM) data to identify security issues for remediation.
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of relevant event detail and summary information.
• Document all actions taken in the ticketing system and SIEM.
• Prepare periodic reports for clients.
• Work on rotating shifts (three shifts), as we provide 24/7 security services.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field
• Genuine interest in cybersecurity and a willingness to learn
• Understanding of networking fundamentals (TCP/IP, DNS, HTTP, common ports and protocols)
• Familiarity with operating system fundamentals across Windows and Linux/Unix
• Strong analytical skills, attention to detail, and the ability to stay composed under pressure
• Good communication skills in English

Preferred Qualifications

• Hands-on cybersecurity experience (internships, labs, or personal projects)
• Exposure to SIEM tools (e.g., Splunk, QRadar)
• Familiarity with cloud services such as AWS and Azure
• Scripting experience with Python, Bash, or PowerShell
• Cybersecurity certifications (e.g., CompTIA Security+, CEH)