SOC Analyst (Trainee)

Gruve; Pune District; On-site; INR 420,000 - 700,000; Full time

Job summary

Gruve, a Pune-based software services startup, is seeking an entry-level analyst for the 24×7 security monitoring rotation. You'll respond to alerts in the Exaforce AI SIEM, following runbooks under guidance, and progress toward independent triage within six months.

You will monitor alert queues, perform first-level triage, document investigations, and escalate with accurate context. The role includes health checks on log sources, handovers, and structured training in SIEM, cloud audit,

Qualifications

• Fundamentals of networking (TCP/IP, DNS, HTTP/TLS) and operating systems (Linux, Windows).
• Core security concepts: common attack types, malware categories, authentication basics.
• Clear written English for ticket and handover quality.
• Committed to 24×7 rotational shifts including nights and weekends.

Responsibilities

• Monitor the Exaforce alert queue and acknowledge within SLA; perform first-level triage per documented runbooks.
• Classify alerts (true/false positive) with evidence and record complete investigation notes in Linear tickets.
• Escalate per the severity matrix to the shift senior / L2 with accurate context and timelines.
• Run scheduled health checks on log sources, collectors and dashboards; raise ingestion-gap tickets.
• Execute clean shift handovers and maintain the shift log.
• Complete the structured training path (SIEM, cloud audit, identity, network flow fundamentals) and participate in shift drills.

Skills

Networking basics

OS fundamentals

Security concepts

English communication

Education

BE/BTech in CS/IT/EC

Job description

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position summary:

Entry-level analyst on the 24×7 security monitoring rotation. First responder to alerts in the Exaforce AI SIEM, working strictly from runbooks under the guidance of the shift senior, and building toward independent triage within 6 months.

Key Roles & Responsibilities:

• Monitor the Exaforce alert queue and acknowledge within SLA; perform first-level triage per documented runbooks.
• Classify alerts (true/false positive) with evidence and record complete investigation notes in Linear tickets.
• Escalate per the severity matrix to the shift senior / L2 with accurate context and timelines.
• Run scheduled health checks on log sources, collectors and dashboards; raise ingestion-gap tickets.
• Execute clean shift handovers and maintain the shift log.
• Complete the structured training path (SIEM, cloud audit, identity, network flow fundamentals) and participate in shift drills.

Mandatory Qualifications:

• BE/BTech (CS/IT/E&TC) or equivalent.
• Fundamentals of networking (TCP/IP, DNS, HTTP/TLS) and operating systems (Linux, Windows).
• Core security concepts: common attack types, malware categories, authentication basics.
• Clear written English for ticket and handover quality.
• Committed to 24×7 rotational shifts including nights and weekends.

Preferred Qualifications:

• CEH, CompTIA Security+, or Google Cybersecurity Certificate.
• CTF / home-lab exposure; basic Python or shell scripting.
• Cloud fundamentals, ideally GCP.

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.