SOC L1

About the role

The SOC Analyst L1 is responsible for real-time monitoring, triage, and initial analysis of security events and alerts generated from the IBM QRadar SIEM platform and associated security tools. This role focuses on identifying potential threats, validating incidents, and escalating genuine issues for further investigation, ensuring proactive and continuous protection of enterprise systems.

What you'll do

• Monitor, analyze, and triage security events and alerts using IBM QRadar and other integrated tools
• Identify false positives and validate true security incidents for escalation to L2 analysts
• Perform initial investigation and categorization of QRadar offenses based on severity and priority
• Follow defined SOC processes, playbooks, and standard operating procedures (SOPs)
• Document incident details and maintain accurate records in the incident management system (e.g., ServiceNow, JIRA)

What you need

• 2–4 yrs of experience
• SIEM
• Incident response
• Firewalls
• Networking
• TCP/IP
• SOP writing
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CCNA
• JIRA
• ServiceNow

What you get

• ₹5 L–₹8 L a year