SOC L1 Analyst - Mumbai

Neysa Networks; Maharashtra; On-site; INR 600,000 - 900,000; Full time

Job summary

Neysa Networks is seeking a SOC Analyst (L1.5) for onsite work to monitor, triage, and investigate security events in real time. This role focuses on initial deep dive into alerts to identify and document threats, safeguarding our Gen AI security landscape.

Ideal candidates have 1–3 years in SOC, familiarity with SIEM, MITRE ATT&CK, and a willingness to work 24/7 shifts. Join Neysa to help democratize AI adoption securely.

Qualifications

• 1–3 years of SOC experience focused on log analysis, incident management and RCA.
• Availability to work 24/7 rotational shifts.

Responsibilities

• Analyze alerts and logs from SIEM systems.
• Correlate multiple alerts to identify threat patterns.
• Produce reports and meet defined SLAs.
• Investigate security logs from networks, firewalls, IPS, WAF, endpoints, O365, cloud and databases.
• Perform incident analysis of phishing, malware, C&C traffic, signature triggers, and firewall logs.
• Apply MITRE ATT&CK and Cyber Kill Chain frameworks.
• Understand networking, firewalls, Linux, security policies, vulnerabilities, and IoCs.

Skills

Log analysis

Incident management

Root Cause Analysis

Tools

SIEM

MITRE ATT&CK

Job description

Type: Onsite – Work from office, 24x7

About Neysa:

Neysa is an AI Acceleration Cloud System provider, dedicated to democratizing AI adoption with purpose-built platforms and services for AI-native applications and workloads. Co-founded by industry leaders, we empower businesses to discover, deploy, and scale Generative AI (Gen AI) and AI use cases securely and cost-effectively. Our flagship platforms—Neysa Velocis, Neysa Overwatch, and Neysa Aegis—accelerate AI deployment, optimize network performance, and safeguard AI/ML landscapes. We are committed to enabling AI-led innovation across industries and geographies.

About the Role

At Neysa, our SOC Analysts are the first line of defence in our security ecosystem. This role is designed for a detail-oriented professional who excels at monitoring, triaging, and investigating security events in real-time. As an L1.5 analyst, you will be responsible for the initial "deep dive" into alerts, ensuring that potential threats are identified, analysed, and documented with precision. This is a foundational role where your ability to connect disparate data points will directly protect our business landscape.

Key Expectations & Responsibilities

• Alert & Log Analysis: Ability to work on log and alert analyses based on the security alerts generated by the SIEM system.
• Correlation: Ability to correlate multiple alerts to connect the dots and detect an overall threat pattern.
• SLA & Reporting: Ability to work as per defined SLAs and generate SIEM reports according to business requirements.
• Daily Investigation: Assist in investigating security logs across various sources including Network traffic, Firewalls, IPS, WAF, Endpoints, O365, Cloud and Databases.
• Incident Analysis: Experience performing analysis of phishing incidents, malware incidents, C&C traffic, signature triggers, firewall logs etc.
• Framework Knowledge: Understanding of the MITRE ATT&CK framework and Cyber Kill Chain framework.
• Foundations: Basic but strong understanding of networking, firewalls, Linux environments, security policies, vulnerabilities, and Indicators of Compromise (IoCs).

Added Advantages (Good to have)

• Use Case Support: Previous experience or interest in assisting with the creation of detection rules/use cases in a SIEM.
• Proactive Support: Familiarity with basic threat hunting techniques to look for anomalies in the environment.

Experience & Qualification

• Experience: 1 - 3 years of experience working in a Security Operations Center (SOC) with a primary focus on log analysis, incident management, incident reporting, and Root Cause Analysis (RCA).
• Availability: Readiness to work in 24/7 rotational shifts.Desired Certification (Any one): Blue Team Level 1 (BTL1) Certified Ethical Hacker (CEH)