SOC Analyst L1

St. Fox; Maharashtra; On-site; INR 540,000 - 660,000; Full time

Benefits offered by this job

Commuter assistance

Health insurance

Provident Fund

Leave encashment

Life insurance

Paid time off

Flexible schedule

Job summary

St. Fox in Maharashtra, India, is seeking an L1 SOC Analyst to monitor security events 24/7 using SIEM and EDR tools. The role emphasizes incident triage, initial response, and accurate ticketing.

You will work on in-person shifts, perform basic enrichment, follow runbooks, and ensure SLA adherence while contributing to a secure client environment.

Qualifications

• Basic understanding of networking (TCP/IP, DNS, HTTP, VPN) and security concepts (malware, phishing, brute force attacks).
• Familiarity with SIEM, EDR, XDR tools such as Splunk, QRadar, Sentinel, CrowdStrike, Defender, and Sophos.
• Knowledge of log analysis (Windows, Linux, Firewall logs) and basic scripting (PowerShell, Python).

Responsibilities

• Monitor security alerts from SIEM/EDR/XDR/NGSIEM platforms.
• Perform initial triage and validation of alerts (true positives vs false positives).
• Create and manage incident tickets in ITSM tools.
• Follow runbooks and playbooks for incident response.
• Escalate to L2 SOC for confirmed incidents.
• Perform basic enrichment (IP, URL, hash reputation checks).
• Maintain shift handover notes and documentation.
• Ensure adherence to SLA/KPI targets.

Skills

Networking basics

Security concepts

SIEM tools

EDR tools

XDR/NGSIEM

Log analysis

PowerShell

Python

Tools

Splunk

QRadar

Sentinel

CrowdStrike

Defender

Sophos

Job description

St. Fox, a leading consultancy in the realm of Cybersecurity and advanced tech solutions, is recognized for its pioneering approach to digital security and innovation. Driven by the ethos "Innovate Fearlessly, Protect Relentlessly," we empower businesses globally to secure their operations and maximize efficiency through cutting-edge technology strategies.

Role Summary: The L1 SOC Analyst is responsible for 24×7 monitoring, alert triage, and initial incident response using SIEM, EDR, and security tools. This role ensures timely detection and escalation of security events.

Key Responsibilities

• Monitor security alerts from SIEM / EDR / XDR / NGSIEM platforms
• Perform initial triage and validation of alerts (true positive vs false positive)
• Create and manage incident tickets in ITSM tools
• Follow predefined runbooks and playbooks for incident response
• Escalate suspicious or confirmed incidents to L2 SOC
• Perform basic enrichment (IP, URL, hash reputation checks)
• Maintain shift handover notes and documentation
• Ensure adherence to SLA / KPI targets

Requirements Required Skills

• Basic understanding of: o Networking (TCP/IP, DNS, HTTP, VPN) o Security concepts (malware, phishing, brute force attacks)
• Familiarity with tools: o SIEM (e.g., Splunk, QRadar, Sentinel) o EDR (e.g., CrowdStrike, Defender, Sophos)
• Knowledge of: o Log analysis (Windows, Linux, Firewall logs) Basic scripting knowledge (optional): PowerShell / Python

Certifications (Preferred)

• Security+
• CEH (basic level)
• SC-200 (optional)

Key KPIs

• Alert acknowledgment time
• SLA adherence
• Ticket quality & documentation
• Escalation accuracy

BenefitsWhat We Offer

• Competitive salary and benefits package.
• Opportunities for professional growth and advancement.
• Exposure to cutting-edge technologies and projects.
• A collaborative and supportive work environment.

Job Types: Full-time, Permanent

Pay: Up to ₹600,000.00 per year

Benefits

• Commuter assistance
• Flexible schedule
• Health insurance
• Leave encashment
• Life insurance
• Paid sick time
• Paid time off
• Provident Fund

Application Question(s)

• Current CTC?
• Notice Period?

Experience

• Incident response: 1 year (Required)

Work Location: In person