SOC Analyst -3+ years- Chennai

Crescendo Global Leadership Hiring India; Chennai District; On-site; INR 500,000 - 900,000; Full time

Job summary

Crescendo Global Leadership Hiring India in Chennai is seeking a SOC Analyst with 2+ years to monitor security alerts and support incident response in a structured cybersecurity environment.

You will work with SIEM, SOAR and EDR tools, perform triage, and contribute to incident documentation while rotating shifts.

The role offers exposure to enterprise security operations and a path to deepen skills in Splunk and XSOAR.

Qualifications

• Bachelor's degree preferred in cybersecurity, computer science, information technology or related field.
• 1–3 years in a SOC, security monitoring or IT operations role with security exposure.
• Familiarity with SIEM concepts and basic Splunk query construction.
• Exposure to SOAR/EDR platforms such as Cortex XSOAR and Defender for Endpoint a plus.
• Willingness to work 24x7 rotational shifts including nights and holidays.

Responsibilities

• Monitor real-time security alerts across SIEM, SOAR and EDR dashboards and perform first-level triage.
• Use Splunk to conduct basic SIEM queries and enrich alerts with relevant user, asset, network and timeline information.
• Log, categorize and escape confirmed security incidents in accordance with defined incident management procedures.
• Follow established playbooks for phishing, malware, suspicious login and endpoint security alerts.
• Perform authorized Tier-1 containment actions, including endpoint isolation where applicable.
• Maintain accurate shift notes, ticket documentation and incident summaries.

Skills

SIEM concepts

Incident response

Security monitoring

Cybersecurity fundamentals

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

Splunk SPL

Palo Alto Cortex XSOAR

Microsoft Defender for Endpoint

Job description

SOC Analyst 2+ years – Chennai

Location – Chennai

Your Future Employer – A leading organization offering an opportunity to work in a structured cybersecurity environment with exposure to enterprise security operations and advanced security tools.

Responsibilities –

1. Monitor real-time security alerts across SIEM, SOAR and EDR dashboards and perform first-level triage.
2. Use Splunk to conduct basic SIEM queries and enrich alerts with relevant user, asset, network and timeline information.
3. Log, categorize and escape confirmed security incidents in accordance with defined incident management procedures.
4. Follow established playbooks for phishing, malware, suspicious login and endpoint security alerts.
5. Perform authorized Tier-1 containment actions, including endpoint isolation where applicable.
6. Maintain accurate shift notes, ticket documentation and incident summaries.

Requirements –

1. 1–3 years of hands‑on experience in a Security Operations Centre, security monitoring or IT operations role with security exposure.
2. Familiarity with SIEM concepts and basic Splunk SPL/query construction.
3. Willingness to work in 24x7 rotational shifts, including nights, weekends and public holidays.
4. Bachelor's degree in Cybersecurity, Computer Science, Information Technology or a related field is preferred.
5. Exposure to SOAR/EDR platforms such as Palo Alto Cortex XSOAR and Microsoft Defender for Endpoint will be an advantage.

What is in it for you –

• Opportunity to build your career in cybersecurity and SOC operations.
• Hands‑on exposure to SIEM, SOAR and EDR technologies.
• Opportunity to work on real‑time security monitoring and incident response.

Crescendo Global does not discriminate on the basis of race, religion, color, origin, gender, sexual orientation, age, marital status, veteran status or disability status.

Note –We receive a large number of applications on a daily basis, making it difficult for us to respond to every candidate individually. Please assume that your profile has not been shortlisted if you do not hear from us within 1 week. Your patience is highly appreciated.