SOC Analyst L1

cloudDFN; Thane; On-site; INR 800,000 - 1,100,000; Full time

Job summary

cloudDFN, a cutting-edge cybersecurity solutions provider, is seeking a SOC Analyst to monitor, analyze, and validate incidents using SIEM tools. You will respond to incidents from multiple channels and collect logs for containment and investigation.

You will interpret logs from firewalls, IDS/IPS, VPN, and other security devices, escalate when needed, and log requests in ticketing systems. Familiarity with ITIL processes and common SIEM platforms will help you protect clients in a fast-changing

Qualifications

• Hands-on experience with IDS/IPS, firewall, VPN and related security products.
• Proficient with Security Information and Event Management (SIEM) tools.
• Knowledge of TCP/IP network traffic and event log analysis.
• Familiarity with major SIEM platforms such as LogRhythm, QRadar, ArcSight, and Sentinel.
• Understanding of ITIL disciplines: Incident, Problem, and Change Management.

Responsibilities

• Monitor, analyze, and validate incidents via SIEM solutions.
• Respond to incidents reported through email, calls, and other channels.
• Collect relevant logs for incident containment and security investigations.
• Escalate confirmed incidents to SOC Analyst and perform preliminary analysis.
• Understand and interpret logs from sources like firewalls, IDS/IPS, Windows servers, Cisco devices, etc.
• Report alarms or threats in ITSM platforms.
• Track and update incidents based on client updates and analysis results.
• Log client requests and change requests in ticketing systems.

Skills

Quick learner

IDS/IPS

Firewall

VPN

SIEM

TCP/IP

ITIL concepts

Tools

LogRhythm

QRadar

ArcSight

Novell Sentinel

Other SIEM tools

Job description

About Us

cloudDFN is a cutting-edge cybersecurity solutions provider specializing in Managed SOC Services, Cybersecurity Assessment Services, and cDFN WatchTower, our CAASM (Cyber Asset Attack Surface Management) platform.

We empower organizations with real-time threat detection and comprehensive risk assessments to reduce vulnerabilities, ensure compliance, and enhance overall security posture.

Our expert team is committed to delivering tailored, proactive defense strategies that keep you protected in a rapidly evolving cyber landscape.

Job Description

• Monitor, analyze, and validate incidents via SIEM solutions.
• Respond to incidents reported through various channels, including email, calls, and more.
• Collect relevant logs for incident containment and security investigation.
• Escalate confirmed incidents to SOC Analyst and perform preliminary analysis.
• Understand and interpret logs from diverse sources like FW, IDS, Windows DC, Cisco appliances, etc.
• Report alarms triggered or threats detected in ITSM Platforms.
• Track and update incidents based on client updates and analysis results.
• Log client requests and change requests in ticketing systems.

Requirements

• Quick learner, adaptable to dynamic duties.
• Hands-on experience in IDS/IPS, Firewall, VPN, and other security products.
• Proficient in Security Information Event Management (SIEM) tools.
• Knowledge of TCP/IP network traffic and event log analysis.
• Familiarity with LogRhythm, QRadar, ArcSight, Novell Sentinel, or any other SIEM tool.
• Understanding of ITIL disciplines such as Incident, Problem, and Change Management.