SOC Analyst — Security Operations

About the role

Monitor the security alert queue continuously across shift, ensuring no alerts are missed, delayed, or left without an initial disposition. review alert context, classify by type and potential severity, and determine whether the alert warrants escalation or closure as a false positive. Apply documented playbooks and runbooks to guide triage decisions; escalate promptly to L2 when an alert exceeds L1 scope or confidence threshold.

What you'll do

• Monitor the security alert queue continuously across shift, ensuring no alerts are missed, delayed, or left without an initial disposition
• Perform initial triage of incoming alerts: review alert context, classify by type and potential severity
• Maintain accurate, timely documentation of all triage actions: alert details, initial findings, disposition rationale, and escalation notes
• Support shift handoff quality by ensuring all open items are clearly documented and communicated to the incoming analyst
• Use GreyMatter as the primary platform for alert review, case management, and initial investigation workflows

What you need

• 1–4 years in cybersecurity
• ServiceNow
• Networking
• TCP/IP
• B.Sc or B.Tech or B.E. or BCA

Good to have

• SIEM
• EDR
• Splunk
• Compliance