SOC Analyst (Trainee)

Gruve; Pune District; On-site; INR 350,000 - 520,000; Full time

Job summary

Gruve is seeking an entry-level analyst to join the 24×7 security monitoring rotation, acting as a first responder to alerts in the Exaforce AI SIEM under guidance from the shift senior. The role aims to build toward independent triage within six months.

You will monitor alerts, perform initial triage, document investigations, and escalate with accurate context. Training across SIEM, cloud audit, identity, and network fundamentals is provided.

Qualifications

• Bachelor’s degree in CS/IT/ETC or equivalent is required.
• Fundamentals of networking (TCP/IP, DNS, HTTP/TLS) and operating systems (Linux, Windows).
• Core security concepts: common attack types, malware categories, authentication basics.
• Clear written English for ticket and handover quality.
• Committed to 24×7 rotational shifts including nights and weekends.

Responsibilities

• Monitor the Exaforce alert queue and acknowledge within SLA; perform first-level triage per runbooks.
• Classify alerts (true/false positive) with evidence and record investigation notes in Linear tickets.
• Escalate per severity matrix to the shift senior / L2 with context and timelines.
• Run scheduled health checks on log sources, collectors and dashboards; raise ingestion-gap tickets.
• Execute clean shift handovers and maintain the shift log.
• Complete the structured training path (SIEM, cloud audit, identity, network flow fundamentals) and participate in shift drills.

Skills

Networking fundamentals

Security concepts

OS basics

Written English

Shift work

Education

BE/BTech in CS/IT/ETC or equivalent

Tools

Linux

Windows

Job description

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position summary:

Entry-level analyst on the 24×7 security monitoring rotation. First responder to alerts in the Exaforce AI SIEM, working strictly from runbooks under the guidance of the shift senior, and building toward independent triage within 6 months.

Key Roles & Responsibilities:

• Monitor the Exaforce alert queue and acknowledge within SLA; perform first-level triage per documented runbooks.
• Classify alerts (true/false positive) with evidence and record complete investigation notes in Linear tickets.
• Escalate per the severity matrix to the shift senior / L2 with accurate context and timelines.
• Run scheduled health checks on log sources, collectors and dashboards; raise ingestion-gap tickets.
• Execute clean shift handovers and maintain the shift log.
• Complete the structured training path (SIEM, cloud audit, identity, network flow fundamentals) and participate in shift drills.

Mandatory Qualifications:

• BE/BTech (CS/IT/E&TC) or equivalent.
• Fundamentals of networking (TCP/IP, DNS, HTTP/TLS) and operating systems (Linux, Windows).
• Core security concepts: common attack types, malware categories, authentication basics.
• Clear written English for ticket and handover quality.
• Committed to 24×7 rotational shifts including nights and weekends.

Preferred Qualifications:

• CEH, CompTIA Security+, or Google Cybersecurity Certificate.
• CTF / home-lab exposure; basic Python or shell scripting.
• Cloud fundamentals, ideally GCP.

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.