SOC Analyst (L1.5)
Role Overview
We are looking for a SOC Analyst (L1.5) with hands-on experience in Security Operations, Security Monitoring, Incident Response, Threat Hunting, and SIEM technologies.
The ideal candidate should have exposure to Logpoint SIEM and strong experience in handling security incidents, alert triage, and threat investigations in a 24x7 SOC environment.
Candidates with strong experience in Microsoft Sentinel, Splunk, QRadar, or ArcSight along with incident response and threat hunting capabilities will also be considered.
Key Skills for This Role
Full Job Posting
Key Responsibilities
- Security Monitoring & Incident Detection
- Monitor and analyze security alerts generated from SIEM and integrated security tools.
- Perform real-time alert triage and validate security incidents.
- Investigate incidents related to malware, phishing, ransomware, insider threats, account compromise, privilege misuse, and unauthorized access.
- Escalate incidents to L2/L3 teams as per defined processes.
- Ensure adherence to incident response SLAs and SOC procedures.
- Incident Response & Investigation
- Perform incident investigation and root cause analysis.
- Analyze logs from:
- Windows Servers & Workstations
- Linux Systems
- Active Directory
- Firewalls
- IDS/IPS
- EDR/XDR Solutions
- Proxy & Email Security Platforms
- Cloud Platforms (Azure, AWS, GCP)
- Support containment, eradication, recovery, and remediation activities.
- Document incidents, findings, and recommendations.
- Threat Hunting & Threat Intelligence
- Perform proactive threat hunting activities.
- Utilize MITRE ATT&CK Framework for threat mapping and analysis.
- Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Correlate threat intelligence with internal security events.
- Identify suspicious user and system behavior.
- SIEM Operations
- Monitor and manage Logpoint SIEM use cases and alerts.
- Support correlation rule tuning and alert optimization.
- Create and maintain dashboards, reports, and custom searches.
- Validate log ingestion and monitor SIEM health.
- Reduce false positives through continuous tuning activities.
- Required Technical Skills SIEM Technologies
- Logpoint SIEM (Preferred)
- Microsoft Sentinel
- Splunk
- IBM QRadar
- ArcSight
- Security Technologies
- Microsoft Defender
- CrowdStrike
- SentinelOne
- Palo Alto
- Fortinet
- Check Point
- Cisco Security Solutions
- Email Security Solutions
- Threat & Security Operations
- Security Monitoring
- Incident Response
- Alert Triage
- Incident Investigation
- Threat Hunting
- Threat Intelligence
- Malware Analysis
- Phishing Investigation
- Event Correlation
- Root Cause Analysis
- Operating Systems & Networking
- Windows Administration
- Linux Administration
- TCP/IP
- DNS
- DHCP
- VPN
- HTTP/HTTPS
- SMTP
- Network Security Concepts
- Security Frameworks
- MITRE ATT&CK
- Cyber Kill Chain
- NIST Incident Response Lifecycle
- Threat Intelligence Concepts
Qualifications
- Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field.
- 3+ years of SOC Operations experience.
- Experience working in a 24x7 SOC environment.
- Strong analytical and troubleshooting skills.
- Good verbal and written communication skills.
Preferred Certifications
- SC-200 (Microsoft Security Operations Analyst)
- CEH
- CompTIA Security+
- Logpoint Certified Analyst
- Splunk Certifications
- Ideal Candidate
- 3-6 years of SOC experience.
- Hands-on exposure to Logpoint SIEM is highly desirable.
- Strong experience with Microsoft Sentinel, Splunk, QRadar, or ArcSight.
- Experience in Incident Response, Alert Triage, Threat Hunting, Security Monitoring, and Threat Intelligence.
- Exposure to CrowdStrike, Defender, SentinelOne, Palo Alto, or Fortinet.
- Willingness to work from Hyderabad in 24x7 rotational shifts.
About Zensar
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Zensar
Angular
, IND
Frontend: Angular 21 (TypeScript, standalone components, signals, deferred views); RxJS; NgRx/Redux (store, effects, selectors); Angular CLI • UI / Design System: Bespoke Angular component library; Angular Material/CDK;
AES - DE - DevOps - AWS DevOps
Pune, IND
Key Responsibilities Design and implement CI/CD pipelines for AI solutions. Automate infrastructure provisioning using Terraform or Bicep. Manage AI environment deployments across dev, test, and production. Implement mon
Digital Product Owner - B2B
Bengaluru, IND
Backlog Ownership: Own and maintain a single, prioritized product backlog for B2B Commerce and supporting sales tools. Author well-structured epics and user stories with clear acceptance criteria, success metrics, and te
ESaaS - MSD -Functional - D365 ERP Product Owner/Scrum Master
Bengaluru, IND
Product & Agile Skills Product ownership / product management roles Backlog management and prioritization User story definition and acceptance criteria Roadmap planning and release management Agile delivery frameworks (S
DE&A - Core - Advanced Visualization & Cloud Reporting - Azure Analysis Services
Pune, IND
Job Title: Data Platform Engineer (Infrastructure & Data Engineering) Purpose Support the design, build, and operation of the Data Platform, blending infrastructure engineering with data engineering practices to keep the
Senior Manager - Infrastructure Governance & Asset Lifecycle Management
Chennai, IND
Angular
, IND
AES - DE - DevOps - AWS DevOps
Pune, IND
Digital Product Owner - B2B
Bengaluru, IND
ESaaS - MSD -Functional - D365 ERP Product Owner/Scrum Master
Bengaluru, IND
ControlUp SME / Engineer
Pune, IND
DE&A - Core - Advanced Visualization & Cloud Reporting - Azure Analysis Services
Pune, IND
Senior Manager - Infrastructure Governance & Asset Lifecycle Management
Chennai, IND
Salesforce Operations Analyst
Pune, IND