Monitor and triage security alerts from SIEM, EDR, and cloud sources; investigate suspicious endpoint, identity, and cloud activity; document findings; escalate incidents to Tier 2/IR; follow and improve playbooks; communicate clearly with clients and internal teams.
Description
We’re looking for a Tier 1 SOC Analyst to join our team and handle initial triage, monitoring, and investigation of security alerts across cloud and endpoint environments.
This is a client-facing role requiring strong English, excellent verbal communication skills, and the ability to clearly communicate findings and escalations. The position is intended for candidates with at least 1 year of hands-on SOC / Security Operations experience.
The role is based on morning shifts aligned with US working hours, 08:00–17:00 US time.
Responsibilities
- Monitor security alerts from SIEM, EDR, and cloud platforms
- Perform initial triage and classification of alerts as true or false positives
- Investigate suspicious activities across endpoints, identities, and cloud environments
- Escalate confirmed incidents to Tier 2 / Incident Response teams with proper context
- Analyze logs from multiple sources, including CloudTrail, Azure Activity Logs, OS logs, and other relevant security data sources
- Document findings clearly in tickets and investigation reports
- Follow existing playbooks and contribute to improving detection logic over time
- Communicate clearly with internal teams and clients regarding alerts, findings, and escalations
- 1+ years of experience in SOC / Security Operations
- Hands-on experience with EDR tools such as CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint
- Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar
- Understanding of networking basics, including IP, DNS, HTTP/S, ports, and related concepts
- Basic knowledge of Linux and Windows operating systems
- Ability to analyze logs and identify suspicious behavior
- Fluent English, both written and spoken — mandatory
- Excellent verbal communication skills, especially in client-facing situations
Preferred Qualifications
- Experience with cloud environments such as AWS, Azure, or GCP
- Knowledge of GCP / Google Cloud Platform — significant advantage
- Ability to investigate cloud activity, including IAM, API calls, and resource changes
- Understanding of identity-based attacks, such as token abuse and privilege escalation
- Experience with scripting in Python or Bash
Similar Jobs
Big Data • Fintech • Mobile • Payments • Financial Services
As the CRA Compliance Lead, you will manage compliance strategies, enhance community engagement, analyze consumer complaints, and ensure alignment with regulatory expectations for Affirm Bank.
HR Tech • Professional Services
Accepts unsolicited applications to join the company's talent pool. Candidates should submit an updated resume/CV and optionally a portfolio. The employer will consider applicants for future roles across sectors, industries, and seniority levels.
HR Tech • Professional Services
Lead and coach an inside sales team to drive B2B revenue: manage lead flow and CRM hygiene, identify funnel bottlenecks, optimize processes, report key metrics, collaborate with marketing and operations, and use data to improve conversion and performance.
Top Skills:
CRMExcelHubspotSalesforceZoho
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
