SOC Analyst (Pune)

Title: SOC Analyst L1

Location: Pune

Experience: 12Years

Employment Type: Full-Time

Shift: Rotational Shifts, including Night Shifts

About the Role

We are looking for a SOC Analyst L1 to join our Security Operations Center team. The ideal candidate should have hands-on experience working with Microsoft Sentinel, be comfortable writing KQL queries, and have prior experience in an MSSP/SOC workplace.

The candidate will be responsible for continuous security monitoring, initial alert investigation, incident triage, escalation, and supporting the incident response team.

Key Responsibilities

• Monitor security alerts and events using Microsoft Sentinel and other security monitoring tools.
• Perform L1 alert triage and investigate suspicious activities.
• Analyze logs from endpoints, firewalls, network devices, cloud environments, identity systems, and other security sources.
• Write and execute KQL (Kusto Query Language) queries for alert investigation, threat hunting, and log analysis.
• Perform initial investigation of security incidents and determine severity, impact, and priority.
• Identify false positives and perform appropriate alert closure with proper documentation.
• Escalate confirmed or complex incidents to L2/L3 / Incident Response teams.
• Have a basic understanding of Incident Response (IR) processes, including identification, containment, eradication, and recovery.
• Follow SOC playbooks, escalation procedures, and incident-handling processes.
• Maintain accurate investigation notes and incident documentation.
• Work with multiple customer environments in an MSSP setup while maintaining SLA requirements.
• Participate in continuous improvement of detection rules, use cases, and SOC processes.
• Stay updated on common attack techniques, vulnerabilities, and threat intelligence.

Mandatory Skills & Experience

• 13 years of experience in SOC / Cybersecurity Operations.
• Hands-on experience with Microsoft Sentinel is mandatory.
• Good underst .