An AI agent that applies to roles like this on employers' own sites. 25 applications free, no card needed.
Job Description
- Monitor security alerts, events, and dashboards through SIEM platforms.
- Perform L1 alert triage, initial investigation, and incident classification.
- Analyse security logs from firewalls, Windows/Linux servers, Active Directory, and Microsoft 365.
- Identify suspicious activities, authentication failures, malware alerts, and potential security threats.
- Escalate confirmed or complex incidents to Senior SOC Analysts.
- Create and update incident tickets through ITSM platforms.
- Support SIEM and SOAR integrations, log source validation, and monitoring.
- Maintain incident records, investigation notes, and shift handover reports.
- Assist with vulnerability monitoring and endpoint security alert analysis.
- Follow SOC operational procedures, escalation matrices, and incident response playbooks.
- Basic knowledge of SIEM platforms (Wazuh, Microsoft Sentinel, Splunk, or equivalent).
- Understanding of Windows/Linux operating systems and event logs.
- Networking fundamentals: TCP/IP, DNS, VPN, and firewalls.
- Basic knowledge of Active Directory, Microsoft Entra ID, and Microsoft 365.
- Familiarity with endpoint security and EDR solutions.
- Understanding security incidents, MITRE ATT&CK, and common attack techniques.
- Basic knowledge of SOAR and ITSM workflows.
- Familiarity with vulnerability management concepts.
- Must be willing to work in a 24×7 rotational shift environment.
- Shifts will include day, evening, and night rotations.
- Must be available for weekend and public holiday shifts as per the roster.
- Responsible for proper incident documentation and shift handover.
- Follow defined escalation procedures during all shifts.
- CompTIA Security+
- Microsoft SC-200
- Cisco CyberOps Associate
- Recognised SOC / SIEM training certifications.
- Good analytical and troubleshooting skills.
- Strong written and verbal communication.
- Ability to investigate and prioritise security alerts.
- Good documentation and reporting skills.
- Teamwork and coordination with L1/L2 analysts.
- Willingness to learn emerging security technologies.
Skills
DocumentationSIEMMITRE ATT&CKSOARITSMIntegrationIncident ManagementIncident ResponseLinuxSplunkNetworkingTCP/IPDNSVPNSOCIf a job posting appears fraudulent, asks for payment, contains misleading information, or violates our guidelines, please report it immediately. Our team will review it promptly, Jobaaj does not charge any fee from the applicants.
Similar Jobs
View allNew Others roles in ALG Chennai.
One email a day. Unsubscribe any time.

