We are seeking SOC Analysts with 2–3 years of hands-on experience in Security Operations Center (SOC) environments to support continuous monitoring, detection, analysis, and response to security threats. The role involves working closely with security tools, SIEM platforms, and incident response processes to ensure the organization’s infrastructure, applications, and data remain secure. Candidates with practical exposure to the Elastic Stack, including Elasticsearch and Kibana, will be strongly preferred.
Monitor security alerts and events generated by SIEM and security monitoring tools on a 24×7 or rotational basis.
Analyze and triage security incidents, including malware infections, suspicious activities, and potential intrusions.
Perform initial incident investigation, root cause analysis, and escalation to higher-level security teams when required.
Use Elasticsearch and Kibana dashboards to investigate logs, correlate events, and identify threat patterns.
Document incidents, findings, and response actions in accordance with defined SOC procedures and SLAs.
Support incident response activities, including containment, mitigation, and recovery actions.
Assist in tuning security alerts, dashboards, and detection rules to reduce false positives.
Collaborate with internal IT, network, and security teams to improve overall security posture.
Stay updated on emerging threats, vulnerabilities, and attack techniques relevant to SOC operations.
2–3 years of experience working in a SOC or security monitoring role.
Hands-on experience with SIEM tools, preferably Elastic Stack components such as Elasticsearch and Kibana.
Basic understanding of cybersecurity concepts, threat vectors, and attack methodologies.
Experience in log analysis, event correlation, and incident triage.
Familiarity with incident response workflows and SOC operational processes.
Ability to work in shifts and respond to security incidents under time constraints.
Strong documentation and communication skills for reporting incidents and findings.
SOC operations, security monitoring, SIEM, Elastic Stack, Elasticsearch, Kibana, log analysis, incident response, threat detection, alert triage, security event correlation, malware analysis, network security fundamentals, documentation, incident reporting