SOC Analyst L1

OcITGurugram, Haryana, IndiaAdded 1d ago

SOC Analyst

Free to start · No card · 5 credits the moment you sign up

Job description

SOC Analyst L1 Position Description: We are looking for a dynamic and detail-oriented Command Center SOC L1 Engineer to join our 24x7 Security Operations team. You will be responsible for 24/7 monitoring, triage, and initial investigation of security alerts, escalating confirmed or complex incidents to higher tiers. You have to follow playbooks, document actions thoroughly, and help reduce risk by filtering false positives and prioritizing real threats for rapid response. Key Responsibilities: Continuous SIEM and security tool monitoring for alerts across endpoints, network, identity, email, and cloud. Triage and classification: validate alerts, determine severity/impact, and suppress false positives to combat alert fatigue. Initial investigation: collect context (logs, host/user activity, process/network details), enrich with basic threat intel/IOCs, and determine next steps. Escalation: hand off confirmed or high-risk incidents to Tier 2/IR with clear case notes and evidence. Documentation: maintain tickets, timelines, and shift handovers; contribute to tuning requests and playbook feedback. Tool hygiene: follow and execute standard operating procedures and common playbooks for frequent alert types Required Skills & Qualifications: 0 - 4 years of experience in a Security Operations Center (SOC) or Command Center environment. Understanding of Windows Server (L1 level) including AD, GPO, DNS, DHCP. Hands-on experience with network security tools and concepts (firewalls, proxies, IDS/IPS, VPNs). Proficiency with SIEM platforms (e.g., Splunk, QRadar, Seceon) and EDR solutions (CrowdStrike, MS-Defender). Familiarity with incident response frameworks (e.g., NIST, SANS). Ability to analyze logs, network traffic, and endpoint data to identify and respond to threats. Strong communication skills and ability to work in a high-pressure, fast-paced environment. Preferred Certifications: CompTIA Security CEH Microsoft Certified: Security Operations Analyst Associate ITIL Foundation. .

Prepare your application

Use the description above to assess your fit for OcIT. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.

Match requirements to evidence

Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.

Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.

Check the working arrangement

Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.

Review before submitting

Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.

Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.

Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.