SOC Analyst L1

Prudent Technologies and Consulting, Inc.; Hyderabad; Vor Ort; INR 500.000 - 750.000; Vollzeit

Zusammenfassung

Prudent Technologies and Consulting, Inc. is seeking an SOC Analyst L1 to monitor security events, investigate alerts, and escalate threats. The role emphasizes practical Splunk SIEM skills, incident documentation, and timely ticket handling.

Applicants should be familiar with incident response processes, basic SPL searches, and collaboration with L2/L3 teams. Flexible shifts and relocation to Hyderabad may be required.

Qualifikationen

• Practical knowledge of Splunk SIEM and alert monitoring.
• Experience with basic SPL searches, dashboards, reports and alert configuration.
• Experience in SIEM monitoring and security event analysis.
• Experience with incident documentation and evidence collection.
• Strong ticket handling, escalation, and communication skills.

Aufgaben

• Monitor security events, logs, and alerts using Splunk SIEM.
• Perform initial alert triage and identify suspicious activity.
• Configure and monitor alerts for failed logins and anomalous activity.
• Collect investigation evidence, logs, screenshots, and artifacts.
• Document incidents with steps, timestamps, and findings.
• Create and track security incident tickets using BMC Remedy or similar tools.
• Escalate complex incidents to L2/L3 teams.
• Perform routine SOC checks and follow SOPs.
• Maintain shift handover notes and comply with SLAs.

Kenntnisse

Splunk Power User

SPL basics

SIEM monitoring

Incident documentation

Ticket handling & escalation

Tools

CrowdStrike

Microsoft Office 365

Palo Alto

IBM QRadar

Cisco security devices/firewalls

BMC Remedy

Jobbeschreibung

We are seeking SOC Analyst L1 professionals to monitor security events, investigate alerts, maintain incident documentation, and upscale potential security threats to senior analysts. Candidates should have practical knowledge of Splunk SIEM, alert monitoring, incident ticket management, and basic security operations.

Key Responsibilities

• Monitor security events, logs, and alerts using Splunk SIEM.
• Perform initial alert triage and identify suspicious activities.
• Configure and monitor alerts for repeated failed logins, unauthorized access, and anomalous activity.
• Collect investigation evidence, logs, screenshots, and relevant artifacts.
• Document incidents, investigation steps, timestamps, and findings.
• Create, update, and track security incident tickets using BMC Remedy or similar tools.
• Escalate complex or high-risk incidents to L2/L3 teams.
• Perform routine security platform checks and follow SOC standard operating procedures.
• Maintain shift handover notes and comply with incident response SLAs.

Must-Have Skills

• Splunk Power User skills and relevant user certifications.
• Basic SPL searches, dashboards, reports, and alert configuration.
• SIEM monitoring and security event analysis.
• Incident documentation and evidence collection.
• Ticket handling, escalation, and communication skills.

Nice-to-Have Tools

CrowdStrike, Microsoft Office 365, Palo Alto, IBM QRadar, Cisco security devices/firewalls, and BMC Remedy. The exact Strada Cloud product name needs confirmation.

Candidate Preferences

• Candidates from Chennai willing to travel or relocate to Hyderabad.
• Freshers with strong practical SIEM knowledge and lab experience.
• Willingness to work rotational or night shifts, if required.