SOC ENGINEER

Job Description

We are seeking a detail-oriented and proactive Level 1 (L1) and Level 2 (L2) SOC Engineer with 2–3 years of experience in cybersecurity monitoring and incident response. This role is responsible for real-time monitoring, detection, analysis, and response to security events and threats across the organization’s infrastructure. The candidate must be flexible to work in 24 / 7 rotating shifts , including nights, weekends, and holidays.

Key Responsibilities :

• Monitor security events and alerts using SIEM tools.
• Triage alerts to determine severity, impact, and appropriate response actions.
• Investigate anomalous network activity, system logs, and endpoint behaviour to identify potential threats.
• Respond to and contain security incidents following defined SOC procedures and escalation paths.
• Perform root cause analysis (RCA) and document findings in incident reports.
• Assist with vulnerability assessments, threat intelligence, and ongoing threat hunting efforts.
• Work with IT and network teams to implement remediation steps and enhance preventive controls.
• Contribute to the development and refinement of SOC playbooks, SOPs, and response strategies.
• Stay informed about current cybersecurity trends, TTPs (Tactics, Techniques, and Procedures), threat actors, and zero-day exploits.
• Support compliance audits , internal / external security assessments, and regular security drills.

Required Qualifications :

Preferred Skills :

Work Environment :

Requirements

Hotjar, Maze, Mixpanel, figma