SOC L1 Analyst - Mumbai

Neysa; Mumbai, Navi Mumbai; On-site; INR 600,000 - 900,000; Full time

Job summary

Neysa in Mumbai is seeking a SOC Analyst - L1.5 to serve as the first line of defense in our security operations. You will monitor security events in real time, analyze alerts, correlate data, and document findings with precision.

This onsite, 24x7 role requires strong log analysis and incident management skills. You will investigate logs from networks, firewalls, endpoints, O365, cloud services, and databases, applying MITRE ATT&CK concepts to detect threats and generate actionable reports for

Qualifications

• Experience in a SOC with focus on log analysis and RCA.
• Ability to work in 24/7 rotational shifts.
• Desirable BT L1 CEH or similar security cert.

Responsibilities

• Monitor security events in real time and analyze alerts.
• Correlate multiple alerts to identify threats and trends.
• Generate SIEM reports and document findings clearly.
• Investigate security logs from multiple sources (networks, endpoints, cloud).

Skills

Log analysis

SIEM tooling

Incident management

MITRE ATT&CK

Tools

Firewalls

Linux

Job description

Job Description

Job Title: SOC Analyst - L1

Location: Mumbai

Type:Onsite – Work from office, 24x7

About Neysa:

Neysa is an AI Acceleration Cloud System provider, dedicated to democratizing AI adoptionwith purpose-built platforms and services for AI-native applications and workloads. Co-founded by industry leaders, we empower businesses to discover, deploy, and scaleGenerative AI (Gen AI) and AI use cases securely and cost-effectively. Our flagshipplatforms—Neysa Velocis, Neysa Overwatch, and Neysa Aegis—accelerate AI deployment,optimize network performance, and safeguard AI/ML landscapes. We are committed toenabling AI-led innovation across industries and geographies.

About the Role

At Neysa, our SOC Analysts are the first line of defence in our security ecosystem. This role is designed for a detail-oriented professional who excels at monitoring, triaging, and investigating security events in real-time. As an L1.5 analyst, you will be responsible for the initial "deep dive" into alerts, ensuring that potential threats are identified, analysed, and documented with precision. This is a foundational role where your ability to connect disparate data points will directly protect our business landscape.

Key Expectations & Responsibilities

• Alert & Log Analysis:Ability to work on log and alert analyses based on the security alerts generated by the SIEM system.
• Correlation:Ability to correlate multiple alerts to connect the dots and detect an overall threat pattern.
• SLA & Reporting:Ability to work as per defined SLAs and generate SIEM reports according to business requirements.
• Daily Investigation:Assist in investigating security logs across various sources including Network traffic, Firewalls, IPS, WAF, Endpoints, O365, Cloud and Databases.
• Incident Analysis:Experience performing analysis of phishing incidents, malware incidents, C&C traffic, signature triggers, firewall logs etc.
• Framework Knowledge:Understanding of the MITRE ATT&CK framework and Cyber Kill Chain framework.
• Foundations:Basic but strong understanding of networking, firewalls, Linux environments, security policies, vulnerabilities, and Indicators of Compromise (IoCs). Added Advantages (Good to have):
• Use Case Support:Previous experience or interest in assisting with the creation of detection rules/use cases in a SIEM.
• Proactive Support:Familiarity with basic threat hunting techniques to look for anomalies in the environment.

Experience & Qualification

• Experience:1 - 3 years of experience working in a Security Operations Center (SOC) with a primary focus on log analysis, incident management, incident reporting, and Root Cause Analysis (RCA).
• Availability:Readiness to work in24/7 rotational shifts.
• Desired Certification (Any one): Blue Team Level 1 (BTL1) Certified Ethical Hacker (CEH)