SOC Analyst with 2+ Years Experience - Chennai

Role OverviewJoin our Cyber Fusion Centre as a SOC Analyst supporting continuous 24/7 security surveillance and incident triage. This position involves leveraging SIEM, SOAR, and EDR platforms to analyze alerts, identify security threats, and escalate incidents when necessary.

ResponsibilitiesConduct live monitoring of security alerts using SIEM, SOAR, and EDR interfaces and perform initial incident triage.Utilize Splunk to run fundamental SIEM queries and enrich alerts with pertinent user, device, network, and timeline data.Document, classify, and escalate verified security incidents following established incident management protocols.Adhere to defined playbooks addressing phishing, malware, suspicious logins, and endpoint security incidents.Execute authorized Tier-1 containment activities, including endpoint isolation where needed.Keep detailed shift notes, ticket logs, and summaries of incidents.RequirementsBetween 1 to 3 years of practical experience in Security Operations Centre roles, security monitoring, or IT operations with security exposure.Understanding of SIEM fundamentals and experience building basic Splunk SPL queries.Flexibility to work in 24/7 rotational shifts, including nights, weekends, and public holidays.Preferred educational background in Cybersecurity, Computer Science, Information Technology, or related disciplines.Exposure to SOAR and EDR tools such as Palo Alto Cortex XSOAR and Microsoft Defender for Endpoint is beneficial.BenefitsChance to develop a career in cybersecurity and Security Operations Centre functions.Practical experience with SIEM, SOAR, and EDR technologies.Engagement in real-time threat monitoring and incident management processes.Additional InformationPosition located in Chennai. The employer is a prominent organization offering structured cybersecurity environments with advanced security tools. Applicants should be any graduate. Contact details provided in the original posting have been omitted per guidelines. The organization values inclusivity and does not discriminate based on personal attributes. Note that only shortlisted candidates will be contacted within one week due to high application volume.

ResponsibilitiesMonitor security alerts across SIEM, SOAR, and EDR dashboards for initial triage.Run basic Splunk queries to enrich alert data.Log and escalate confirmed security incidents following procedure.Follow incident playbooks for various threat types.Perform Tier-1 containment including endpoint isolation.Maintain accurate documentation of shifts and incident tickets.

Requirements1-3 years of hands-on SOC or security monitoring experience.Working knowledge of SIEM concepts and Splunk SPL basics.Willing to work 24x7 rotational shifts including nights and weekends.Preferred Bachelor's degree in Cybersecurity, Computer Science, IT or related field.Familiarity with SOAR/EDR platforms such as Palo Alto Cortex XSOAR and Microsoft Defender for Endpoint a plus.

Perks & benefitsCareer growth prospects in cybersecurity and SOC operations.Hands-on use of SIEM, SOAR and EDR tools.Experience in real-time monitoring and incident response. .