DIGITAL SECURITY, SOC Services
Zensar Technologies
Pune Division, Maharashtra, India1–3 yrs4h agovia LinkedIn
About the Role
The SOC L1 Analyst is the first line of defense responsible for continuous security monitoring, alert triage, incident identification, and initial response activities.
Key Responsibilities
- Monitor SIEM dashboards and security tools 24x7.
- Review and triage security alerts and events.
- Perform initial investigation of security incidents.
- Escalate incidents to L2/L3 teams based on severity.
- Monitor EDR, DLP, IDS/IPS, Email Security, Firewalls, and Proxy alerts.
- Execute predefined incident response procedures.
- Validate false positives and document findings.
- Create and maintain incident tickets.
- Generate daily and weekly security reports.
- Support compliance and audit activities.
Requirements & Tech Stack
- SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight
- EDR: CrowdStrike, Defender for Endpoint, SentinelOne
- Basic Networking (TCP/IP, DNS, HTTP, HTTPS)
- Windows/Linux fundamentals
- Incident Management
- MITRE ATT&CK fundamentals
- Security monitoring concepts
Qualifications
Certifications Preferred:
- Security+
- SC-200
- CEH (Associate Level)