SOC Analyst - L1 - Mumbai

Neysa; Mumbai; On-site; INR 500,000 - 800,000; Full time

Job summary

Neysa is seeking a diligent SOC Analyst - L1 to join our Mumbai team onsite. You will monitor security events, triage alerts in real time, and perform initial deep dives to identify potential threats.

The role requires 1–3 years in SOC, familiarity with log analysis, incident management, and basic MITRE ATT&CK knowledge. You will work 24/7 on rotation, contributing to incident reporting and RCAs.

Qualifications

• 1–3 years of SOC experience focusing on log analysis and incident handling.
• Willingness to work in 24/7 rotational shifts.
• Desirable certification: Blue Team Level 1 (BTL1) CEH.

Responsibilities

• Monitor security events in real time and analyze alerts from the SIEM.
• Correlate alerts to identify threats and document findings.
• Prepare reports within defined SLAs for security incidents.
• Investigate security logs across networks, endpoints, cloud, and services.
• Analyze phishing, malware, C2 traffic, and log signatures.
• Understand MITRE ATT&CK and Cyber Kill Chain frameworks.
• Have foundational networking, firewall, Linux, and IoC knowledge.
• Assist in creating detection rules and use cases for SIEM.
• Support proactive threat hunting to spot anomalies.

Skills

Log analysis

Incident management

Incident reporting

Root Cause Analysis

Threat hunting concepts

Networking fundamentals

Firewall basics

Linux basics

Tools

SIEM

Job description

Job Description

Job Title: SOC Analyst - L1

Location: Mumbai

Type:Onsite – Work from office, 24x7

About Neysa:

Neysa is an AI Acceleration Cloud System provider, dedicated to democratizing AI adoptionwith purpose-built platforms and services for AI-native applications and workloads. Co-founded by industry leaders, we empower businesses to discover, deploy, and scaleGenerative AI (Gen AI) and AI use cases securely and cost-effectively. Our flagshipplatforms—Neysa Velocis, Neysa Overwatch, and Neysa Aegis—accelerate AI deployment,optimize network performance, and safeguard AI/ML landscapes. We are committed toenabling AI-led innovation across industries and geographies.

About the Role

At Neysa, our SOC Analysts are the first line of defence in our security ecosystem. This role is designed for a detail-oriented professional who excels at monitoring, triaging, and investigating security events in real-time. As an L1.5 analyst, you will be responsible for the initial “deep dive” into alerts, ensuring that potential threats are identified, analysed, and documented with precision. This is a foundational role where your ability to connect disparate data points will directly protect our business landscape.

Key Expectations & Responsibilities

• Alert & Log Analysis:Ability to work on log and alert analyses based on the security alerts generated by the SIEM system.
• Correlation:Ability to correlate multiple alerts to connect the dots and detect an overall threat pattern.
• SLA & Reporting:Ability to work as per defined SLAs and generate SIEM reports according to business requirements.
• Daily Investigation:Assist in investigating security logs across various sources including Network traffic, Firewalls, IPS, WAF, Endpoints, O365, Cloud and Databases.
• Incident Analysis:Experience performing analysis of phishing incidents, malware incidents, C&C traffic, signature triggers, firewall logs etc.
• Framework Knowledge:Understanding of the MITRE ATT&CK framework and Cyber Kill Chain framework.
• Foundations:Basic but strong understanding of networking, firewalls, Linux environments, security policies, vulnerabilities, and Indicators of Compromise (IoCs). Added Advantages (Good to have):
• Use Case Support:Previous experience or interest in assisting with the creation of detection rules/use cases in a SIEM.
• Proactive Support:Familiarity with basic threat hunting techniques to look for anomalies in the environment.

Experience & Qualification

• Experience:1 - 3 years of experience working in a Security Operations Center (SOC) with a primary focus on log analysis, incident management, incident reporting, and Root Cause Analysis (RCA).
• Availability:Readiness to work in24/7 rotational shifts.
• Desired Certification (Any one): Blue Team Level 1 (BTL1) Certified Ethical Hacker (CEH)