Inviting applications for the role of Consultant - SOC Analyst (Level 1)

We are seeking a skilled and proactive SOC Analyst with good hands-on experience in a 24x7 Security Operations Center (SOC) environment. The ideal candidate will have strong experience in monitoring, detecting, analyzing, and responding to security incidents across on-premise and AWS cloud environments. Hands-on expertise in Elastic SIEM and CrowdStrike is mandatory.

Responsibilities

.Monitor security events and alerts using Elastic SIEM and other security tools.

. Investigate, analyze, and respond to security incidents in a timely manner.

. Perform log analysis from multiple sources including AWS CloudTrail, VPC Flow Logs, endpoints, and network devices.

. Work on incident triage, containment, eradication, and recovery activities.

. Monitor and manage endpoint security using CrowdStrike.

. Analyze suspicious activities, malware alerts, phishing cases, and potential breaches.

. Create and update incident tickets, reports, and documentation.

. Collaborate with IT, Cloud, and Network teams for incident resolution.

. Ensure compliance with defined SLAs and escalation procedures.

. Participate in shift handovers and maintain detailed incident records.

Qualifications we seek in you!

Minimum Qualifications

. Good years of experience in a 24x7 SOC environment.

. Hands-on experience with AWS security services (CloudTrail, GuardDuty, IAM, Security Groups, etc.).

. Strong working knowledge of Elastic SIEM (Elastic Stack / ELK).

. Experience with CrowdStrike Falcon (EDR monitoring & response).

. Good understanding of networking concepts (TCP/IP, DNS, HTTP, VPN).

. Knowledge of security concepts: MITRE ATT&CK, phishing analysis, malware analysis basics.

. Familiarity with incident response lifecycle.

. Experience working in rotational shifts (24x7 support model).

. Good analytical and troubleshooting skills.

. Strong documentation and reporting skills.

Preferred Qualifications/ Skills

. Certifications such as CEH, Security+, AWS Security Specialty (preferred but not mandatory).

. Strong communication skills.

. Ability to work under pressure.

. Team player with a proactive mindset.

. Quick learner and adaptable to new technologies.