SOC Analyst 1

A SOC Analyst is responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats across the organization using advanced security tools, analyzing logs from endpoints, networks, cloud, and OT systems, and performing incident triage, investigation, and escalation in a 247 environment (SIEM, EDR/XDR, IDS/IPS, NDR, firewall, and cloud security tools). This role protects the HNI’s IT and Operational Technology (OT) environments through continuous monitoring, incident response and threat analysis to reduce risk and ensure system reliability. The analyst also supports containment actions and tunes detection rules to reduce false positives to strengthen overall security posture. This is an exciting opportunity to take full ownership of Cybersecurity defense, and security functions, collaborate with cross‑functional and global teams, drive continuous improvement, and shape the future of Security operations and cyber resilience for the organization.

Key Responsibilities

• Monitor SIEM, EDR/XDR, IDS/IPS, NDR, firewall, and cloud security tools
• Investigate alerts and identify threats and anomalies
• Respond to incidents including containment and remediation
• Perform root cause analysis and document findings
• Conduct proactive threat hunting
• Support vulnerability management and remediation tracking
• Monitor cloud and identity security events
• Support OT security monitoring and escalation
• Document incidents and communicate risks

Educational Qualification

B.E./B. Tech in Computer Science, Information Technology, Cybersecurity, or an equivalent qualification.

Required Work Experience and Skills

• 2–4 years of experience in SOC operations / Security Monitoring, Incident detection & response (247 SOC environment)
• Familiarity with SIEM and detection tools
• Knowledge of threat intelligence (IOCs, TTPs, MITRE ATT&CK mapping)
• Knowledge of network, endpoint, and identity security
• Strong analytical and troubleshooting skills

Competency

• Strong analytical and problem‑solving skills
• High attention to detail and ability to identify anomalies
• Willingness to learn and adapt to evolving cybersecurity threats
• Ability to triage and prioritize incidents
• Ability to work in shift‑based or on‑call environments (24*7)
• Good communication and teamwork skills
• Strong sense of ownership and accountability

Preferred Experience/Certifications

• Experience in SOC environments
• Cloud security monitoring experience
• OT/industrial systems familiarity
• Scripting (PowerShell, Python)
• Certifications (CEH, Security+, CySA+, GCIH)