Security Engineer - I (SOC)

Overview

Security Engineer I (SOC) is an entry-level, hands-on role in a 24x7 Security Operations Center for monitoring, triaging, and responding to security alerts.

What you'll do

• Provide continuous alert monitoring and response coverage in a rotating shift schedule.
• Monitor, triage, and investigate alerts from SIEM, EDR, cloud, network, and identity sources.
• Help reduce false positives through detection tuning and documentation of tuning recommendations.
• Assist in building and testing detection rules and use cases aligned to MITRE ATT&CK.
• Support automation by building SOAR playbooks and AI agent-driven workflows for enrichment, triage, and response.
• Track and report SOC metrics such as alert volume and false positive rates.

What you'll need

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 1–3 years of experience in cybersecurity or information security.
• Ability to work 24x7 SOC rotating shifts including night shifts, weekends, and holidays.
• Hands-on experience with security tools including vulnerability scanners, SIEMs, and endpoint protection.
• Familiarity with cloud platforms (AWS, GCP, Azure) and basic cloud security practices.
• Understanding of networking, authentication, and access control principles.

Nice to have

• Interest or exposure to detection engineering, SOAR automation, or AI-assisted security workflows.
• Basic scripting experience (Python, Bash, or equivalent).
• Entry-level certifications such as Security+, GSEC, or BTL1.

Details

• Location: Bangalore HQ.