SOC Analyst

Overview

SOC Analyst role in Bengaluru, focused on protecting the organization by monitoring alerts, investigating suspicious activity, responding to incidents, and supporting security and operational workflows through a 24x7 rotational model.

What you'll do

• Monitor real-time security alerts and investigate suspicious network, endpoint, and cloud activity using SIEM queries and threat-analysis tools.
• Identify, document, and escalate security incidents using established incident-response playbooks for containment and remediation.
• Analyze and remediate email-based threats (phishing, malware, spoofing) and manage endpoint security via EDR workflows and MDM policies.
• Handle first-line IT requests including password resets, account unlocks, hardware provisioning, email/collaboration issues, and application access problems.
• Maintain accurate ticket documentation and incident summaries, and contribute to runbook/process and knowledge base updates.
• Monitor external attack surface activity (brand impersonation, fraudulent domains, social-engineering threats) and validate honeytoken decoys for lateral-movement attempts.

What you'll need

• 2+ years of hands-on experience in a Security Operations Center, security monitoring, or incident-response role.
• Ability to triage alerts, investigate incidents, and execute incident-response procedures.
• Experience investigating data-exfiltration indicators (unusual file transfers, large data-volume anomalies, credential harvesting, and unauthorized cloud-service access).
• Solid understanding of IT infrastructure concepts including networks (IP, DNS, ports, protocols), endpoints (macOS), and identity systems (IAM, SSO, MFA).
• Experience with incident-response frameworks (MITRE ATT&CK) and familiarity with ticketing systems (Jira, Linear or similar).
• Strong documentation discipline and ability to write clear incident summaries and shift notes.

Nice to have

• Bachelor's degree in Cybersecurity, Computer Science, or Information Technology.
• Proficiency with Okta (SSO/authentication workflows, admin console, user access management).
• Experience with Jamf for Apple/macOS device management.
• Exposure to Google SecOps, DoControl, Code42, and Cloudflare email security.

Details

• Location: Bengaluru, Karnataka.
• Work pattern: on-site with rotational shifts under a 24x7 follow-the-sun model.
• Relocation available: No.