soc analyst

Systems Limited

<div>
 <p>
  Systems Limited is seeking an experienced
  <strong>
   SOC Analyst &ndash; Level 2 (Tier 2 / Incident Responder)
  </strong>
  to strengthen its cybersecurity operations. This role is responsible for advanced threat investigation, incident response, and containment of security incidents.
 </p>
 <p>
  The candidate will handle escalated alerts from Level 1 analysts, perform in-depth technical analysis, and drive remediation efforts across endpoint, network, and cloud environments. This position serves as the technical backbone of SOC operations and plays a critical role in protecting organizational assets against advanced cyber threats.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <ul>
  <li>
   Lead investigation of escalated security incidents from Level 1 SOC analysts
  </li>
  <li>
   Perform root cause analysis and reconstruct attack chains
  </li>
  <li>
   Conduct endpoint, network, and cloud-based forensic investigations
  </li>
  <li>
   Execute containment and remediation actions including endpoint isolation, account disablement, and IOC blocking
  </li>
  <li>
   Develop and optimize custom KQL and detection queries
  </li>
  <li>
   Tune SIEM and XDR rules to reduce false positives and improve detection accuracy
  </li>
  <li>
   Handle advanced incidents such as ransomware attacks, lateral movement, credential compromise, and data exfiltration
  </li>
  <li>
   Map incidents to MITRE ATT&amp;CK framework for structured analysis
  </li>
  <li>
   Prepare detailed incident reports and executive-level summaries
  </li>
  <li>
   Support proactive threat hunting activities
  </li>
  <li>
   Assist with onboarding of new customers and log sources into SOC platforms
  </li>
  <li>
   Mentor and guide Level 1 SOC analysts
  </li>
  <li>
   Participate in Purple Team engagements alongside Red Team exercises
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements:
  </strong>
 </p>
 <ul>
  <li>
   5&ndash;6 years of experience in SOC operations or Incident Response
  </li>
  <li>
   Strong knowledge of Windows and Active Directory security, network security principles, endpoint security technologies, and cloud security fundamentals (Azure and/or AWS)
  </li>
  <li>
   Hands-on experience with SIEM and XDR platforms and understanding of malware behavior and attacker techniques
  </li>
  <li>
   Experience across the full incident response lifecycle with the ability to write and optimize detection queries (KQL preferred)
  </li>
  <li>
   Strong analytical, documentation, and communication skills
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Location: Khi/ Lhr/ Isb
 </p>
 <p>
 </p>
</div>


SOC Analyst

Aeries Technology Group

<p></p><div><div>Job Id: Aeries/752/25-26
 </div><p></p><div>Location Bangalore,Hyderabad
 </div><p></p><div>Experience Range 1 - 3 Years
 </div><p></p><div>Qualification Graduate/ Post Graduate</div></div>
<br><div><div><b>Job Description</b><b>
</b></div><div><div><p><b>About Us
</b></p><p>Aeries Technology is a Nasdaq listed global professional services and consulting partner, headquartered in Mumbai, India, with centers in the USA, Mexico, Singapore, and Dubai. We provide mid-size technology companies with the right mix of deep vertical specialty, functional expertise, and the right systems &amp; solutions to scale, optimize and transform their business operations with unique customized engagement models. Aeries is Great Place to Work certified by GPTW India, reflecting our commitment to fostering a positive and inclusive workplace culture for our employees. Read about us at https://aeriestechnology.com
</p></div><div><p><b>About Business Unit
</b></p><p>Corporate BU
</p></div><div><p><b>Roles and Responsibility
</b></p><div><div><p><b>Position/Title:</b><b> </b><b>SOC Analyst</b><b> </b><b>L1</b></p></div><p><b>
Department: IT</b></p><p><b>
Employment Type: Full time</b></p><p><b>
Location: Bangalore/Hyderabad</b></p><p><b>
Shifts (if any): Rotational shifts (6 AM&ndash;2:30 PM / 2:30 PM&ndash;11 PM / 9 AM&ndash;5 PM)</b></p><p><b>
Experience: 1+ year experience in Cyber Security</b></p><p></p><p><b><br>
About Aeries:</b></p><p><br>
</p><p>Aeries Technology is a Nasdaq listed (AERT) global professional services and consulting partner, with offices in the USA, India, Mexico, Singapore, and UAE. We provide Private Equities, its Portfolio Companies and mid-market companies with the right mix of deep vertical specialty, functional expertise, and the right systems &amp; solutions to scale, optimize and transform their business operations with unique customized engagement models. Aeries is Great Place to Work certified by GPTW Institute, reflecting our commitment to fostering a positive and inclusive workplace culture for our employees.</p><p></p><p><br>
</p><p>For more information, log on to http://www.aeriestechnology.com</p><p></p><p><b><br>
Job Summary:</b> The SOC L1 Analyst will be the first line of defence in our organization's security operations. This entry-level position is responsible for monitoring security systems, detecting potential threats, and escalating incidents as needed. The SOC L1 Analyst works under the guidance of senior analysts and SOC management to ensure the security and integrity of our information systems.</p><p></p><p><b><br>
Key Responsibilities:</b></p><ul><li>
Continuously monitor security events from various sources, including SIEM, EDR, DLP, VMDR, IDS/IPS, firewalls, and other security tools.</li><li>
Identify and categorize security events, incidents, and anomalies.</li><li>
Perform initial analysis of security events to determine if they are true positives or false positives.</li><li>
Escalate confirmed security incidents to SOC L2 or L3 analysts for further investigation and response.</li><li>
Execute predefined incident response procedures for common security events.</li><li>
Assist in the containment and remediation of low-level security incidents.</li><li>
Stay informed about current security threats and vulnerabilities.</li><li>
Apply threat intelligence to improve detection and response capabilities.</li><li>
Maintain accurate and detailed logs of all security events and incidents.</li><li>
Generate daily, weekly, and monthly security reports for management.</li><li>
Work closely with other SOC team members and IT staff to ensure effective security operations.</li><li>
Communicate effectively with stakeholders regarding security incidents and status updates.</li><li>
Stay current with emerging security trends, technologies, and threats.</li></ul><p></p><p><b><br>
Qualifications:</b></p><ul><li>
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
</li><li>1+ years of experience in cybersecurity, with a focus on SOC operations.</li><li>
Basic knowledge of security tools and technologies (e.g., SIEM, IDS/IPS, firewalls).</li><li>
Understanding of networking protocols, operating systems, and basic security principles.
</li><li>Relevant certifications such as CompTIA Security+, SC-200 or CEH are highly desirable.</li></ul><p></p><p><b><br>
Required Skills:</b></p><ul><li>
Strong analytical and problem-solving skills.</li><li>
Good written and verbal communication skills.</li><li>
Ability to work in a team environment and handle stress in a fast-paced setting.</li></ul><p></p><p><b><i><br>
The Job responsibilities of the candidate shall include but not limited to the Job Description &amp; to perform any other tasks/functions as required by the Company.</i></b></p></div></div></div></div>

SOC Analyst L1

SafeAeon

<div><p><b>JD for SOC Analyst:</b></p><p><b>
What is a SOC analyst?
</b></p><p>SOC analysts can be understood as the first point of contact to any incident/threat in basic terms. SOC stands for Security Operations Center, and it consists of multiple analysts who work 24x7 rotational shifts to fight against threats that could harm an organization. A SOC analyst generally is responsible for assessing the endpoints and look for vulnerabilities using various tools and technologies. However, the role of a SOC analyst is not limited to this:</p><p>
<b>SOC Analyst Job Duties and Responsibilities:</b></p><ul><li>Evaluate critical security incidents using detection tools</li></ul><p>
. &bull; Investigate event alerts and logs from multiple endpoints.</p><ul><li>Analyze and co-relate logs from the firewall, IDS/IPS, AVs, O365, etc</li></ul><p>
. &bull; Work in a 24x7 pro-active environment and respond to security alerts.
</p><ul><li>Document and report incidents/offenses to the clients</li></ul><p>
. &bull; Use Endpoint detection tools to detect malware across the client&rsquo;s environment.</p><ul><li>Maintain and send monthly, weekly reports and other client-specific documentation.</li><li>Work on industry standard SIEM solutions to analyze incidents and create complex indexed searches.</li><li>Using analytical skills to whitelist False Positives incidents.
</li></ul><p>&bull; Keep yourself updated on security news/vulnerabilities and compose a set of Use Cases. &bull; Use basic scripting knowledge to automate processes.</p><ul><li>Onboarding new clients from scratch and configuring their network environment</li></ul><p>
. &bull; Identifying compromised Endpoints by analyzing payloads/logs and notifying clients</p><p>
. &bull; Work on latest security technologies, including Email filtering, Compliance and Patch management, Syslog management, MDR, and SIEM.</p><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><ul><li><p>
Bachelor' degree in technical background.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Additional Information</b></h2><p>
Candidates can apply to recruitment@safeaeon.com</p></div>

SOC Analyst Intern

CCDS

<div><p>CCDS is dedicated to delivering top-notch cybersecurity services to our clients, prioritizing their data protection and security. We are currently seeking a motivated Saudi SOC Analyst Level 1 to join our growing Security Operations Center team. This entry-level position offers an exciting opportunity for individuals who are passionate about cybersecurity and eager to learn. In this role, you will assist in monitoring security events, performing initial analyses, and escalating incidents as necessary.</p><p></p><h3 class="jobSectionHeader"><b>
Responsibilities</b></h3><ul>
<li>Monitor security alerts and events generated by security tools and systems</li>
<li>Conduct initial analysis of security incidents to determine their validity</li>
<li>Assist in the documentation and escalation of confirmed security incidents</li>
<li>Work collaboratively with senior analysts to respond to security threats and vulnerabilities</li>
<li>Participate in ongoing training and development to enhance skills and knowledge in cybersecurity</li>
<li>Maintain awareness of current cybersecurity trends and threats</li>
</ul><p><b>Requirements</b></p><p></p><ul>
<li>
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred</li>
<li>1+ year of experience in a technical support or cybersecurity role is an advantage</li>
<li>Understanding of basic cybersecurity principles and technologies</li>
<li>Familiarity with SIEM tools, firewalls, and intrusion detection systems is a plus</li>
<li>Strong analytical and problem-solving abilities</li>
<li>Excellent communication skills, both written and verbal</li>
<li>Willingness to learn and grow in the field of cybersecurity</li>
<li>Saudi Nationality is Must</li>
</ul><p><b>
Benefits</b></p><ul>
<li>Private Family Health Insurance Class A</li>
<li>Paid Time Off</li>
<li>Training &amp; Development Plan</li>
<li>Performance Bonus</li>
<li>GOSI will be covered as labor law.</li></ul></div>

Wipro

<div>Job Description<p></p><div><div><ul><li><div><b><br>
</b><br>
</div></li></ul></div></div><div><div><div><div>Job Title: SOC ANALYST - DLP
</div></div></div></div><div><div><div><div>City: Bengaluru
</div></div></div></div><div><div><div><div>State/Province: Karnataka
</div></div></div></div><div><div><div><div>Posting Start Date: 2/20/26
</div></div></div></div><div><div><div><div>Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients&rsquo; most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.
</div></div></div></div><div><div><div><div>Job Description:
<div><div><div><h2 class="jobSectionHeader"><b>Job Description
</b></h2></div><div><p><b>Role Purpose<br>
</b></p><p><br>
The purpose of this role is to analyse, identify, rectify &amp; recommend specific improvement measures that help in the security posture of the organization by protecting the sensitive information<br>
<br>
</p></div></div><div><div><h2 class="jobSectionHeader"><b>͏
</b></h2></div><div><h1 class="jobSectionHeader"><b>Do
</b></h1><ul><li><h2 class="jobSectionHeader"><b>Ensuring customer centricity by providing apt cybersecurity
</b></h2></li><li>Monitoring and safeguarding the log sources and security access
</li><li>Planning for disaster recovery in the event of any security breaches
</li><li>Monitor for attacks, intrusions and unusual, unauthorized or illegal activity
</li><li>Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems
</li><li>Conduct security assessments, risk analysis and root cause analysis of security incidents
</li><li>Handling incidents escalated by the L1 team in 24x7 rotational shifts
</li><li>Use advanced analytics tools to determine emerging threat patterns and vulnerabilities
</li><li>Completing all tactical security operations tasks associated with this engagement.
</li><li>Analyses all the attacks and come up with remedial attack analysis
</li><li>Conduct detailed analysis of incidents and create reports and dashboards
</li><li><h2 class="jobSectionHeader"><b>Stakeholder coordination &amp; audit assistance
</b></h2></li><li>Liaise with stakeholders in relation to cyber security issues and provide future recommendations
</li><li>Maintain an information security risk register and assist with internal and external audits relating to information security
</li><li>Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
</li><li>Advice and guidance to employees on issues such as spam and unwanted or malicious emails
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>͏
</b></h2></div><div><h1 class="jobSectionHeader"><b>Deliver
</b></h1><div><div><div><div><p><b>No.<br>
</b></p></div><div><p><b>Performance Parameter<br>
</b></p></div><div><p><b>Measure<br>
</b></p></div></div><br>
<div><div><p>1.<br>
</p></div><div><p>Customer centricity<br>
 </p></div><div><p>Timely security breach solutioning to end users, Internal stakeholders &amp; external customers experience<br>
</p></div></div><br>
<div><div><p>2.<br>
</p></div><div><p>Process Adherence<br>
</p></div><div><p>Adherence to SLA&Atilde;&cent;&Acirc;&Acirc;s (90-95%), response time and resolution time TAT
</p></div></div><br>
</div></div></div></div><div><div><h2 class="jobSectionHeader"><b>͏
</b></h2></div></div><div></div><div><div><h2 class="jobSectionHeader"><b>͏
</b></h2></div></div></div></div></div></div></div><div></div><div><div><div><div>Mandatory Skills: Infrastructure Technology .<br>
<p></p>Experience: 3-5 Years .<br>
<p></p>Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.</div></div></div></div></div><p></p>

SOC ANALYST - DLP

Physicians Revenue Group

<p>Monitor SIEM alerts, endpoint security events, and network telemetry in real time.</p><p>∙Perform initial triage on alerts to determine validity and severity.</p><p>∙Document incident details accurately in ticketing systems (TheHive/Zammad).</p><p>∙Escalate confirmed or suspicious alerts to SOC L2 analysts according to playbooks.</p><p>∙Follow standardized response procedures for phishing, malware, brute force attempts,</p><p>etc.</p><p>∙Assist with basic threat hunting activities under guidance.</p><p>∙Contribute to creation and validation of security detection rules.</p><p>∙Participate in shift rotations to ensure 24/7 SOC operations.</p><p>∙Support vulnerability scanning and patching notifications.</p><p>∙Maintain shift logs, incident registers, and SOC KPIs.</p><p>Job Type: Full-time</p><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li>3years: 1 year (Preferred)</li></ul><p>License/Certification:</p><ul><li>CompTIA Security+  ∙CySA+  Microsoft SC-200  ∙Splunk/Qradar  (Preferred)</li></ul><p>Work Location: In person</p>

SOC Analyst Level 1

YO IT CONSULTING

<div><div><div><p><b>Work Mode:</b> Remote<br>
<b>Engagement Type:</b> Independent Contractor<br>
<b>Schedule:</b> Full-Time or Part-Time Contract</p>
<p><b>Language Requirement:</b> Fluent English</p>
<p>Recruiting on behalf of a cutting-edge AI research lab building advanced AI systems for cybersecurity applications. We are seeking senior cybersecurity professionals with deep hands-on experience across both <b>defensive (Blue Team)</b> and <b>offensive (Red Team)</b> security disciplines. In this role, you will apply real-world adversarial and defensive expertise to evaluate, stress-test, and improve AI models designed to assist with threat detection, incident response, and attack simulation. Your insights will directly inform how AI systems reason about attacks, evasions, detection logic, and response workflows. This is a flexible, remote engagement ideal for experienced practitioners who have operated in enterprise, consulting, or high-security environments.</p>
<p></p><h2 class="jobSectionHeader"><b>Key Responsibilities</b></h2>
<h2 class="jobSectionHeader"><b>Defensive (Blue Team) Contributions</b></h2>
<ul><li><p>Investigate and analyse real or simulated security incidents (e.g., phishing, lateral movement, ransomware, privilege escalation).</p>
</li><li><p>Review logs and telemetry from SIEM, EDR/XDR, firewall, cloud, and identity systems.</p>
</li><li><p>Apply frameworks such as <b>MITRE ATTACK</b> to classify adversary behavior.</p>
</li><li><p>Evaluate alert quality, detection rules, triage decisions, and response workflows.</p>
</li><li><p>Assess AI-generated investigations for technical correctness and operational realism.</p>
</li></ul><h2 class="jobSectionHeader"><b>Offensive (Red Team) Contributions</b></h2>
<ul><li><p>Analyse attack chains including initial access, persistence, privilege escalation, lateral movement, and data exfiltration.</p>
</li><li><p>Simulate adversarial thinking to evaluate detection gaps and bypass techniques.</p>
</li><li><p>Review exploit techniques, payload behaviors, and evasion strategies.</p>
</li><li><p>Provide insights into attack surface analysis and real-world adversary tactics.</p>
</li><li><p>Stress-test AI systems against realistic red-team scenarios.</p>
</li></ul><h2 class="jobSectionHeader"><b>AI Evaluation &amp; Feedback</b></h2>
<ul><li><p>Provide structured reasoning explaining investigative and adversarial decisions.</p>
</li><li><p>Identify weaknesses in AI threat analysis and suggest improvements.</p>
</li><li><p>Help refine benchmarks for detection, triage, and attack simulation accuracy.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Requirements</b></h2>
<h2 class="jobSectionHeader"><b>Experience</b></h2>
<ul><li><p>5+ years in cybersecurity with experience in one or more of:</p>
<ul><li><p>SOC Analyst (Level II/III)</p>
</li><li><p>Incident Responder</p>
</li><li><p>Detection Engineer</p>
</li><li><p>Threat Hunter</p>
</li><li><p>Red Team Operator / Penetration Tester</p>
</li><li><p>Security Consultant (Offensive Security)</p>
</li></ul></li><li><p>Hands-on experience conducting or responding to real-world security incidents.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Technical Skills &ndash; Blue Team</b></h2>
<ul><li><p>Strong experience with:</p>
<ul><li><p>SIEM platforms (Splunk, Sentinel, QRadar, Elastic)</p>
</li><li><p>EDR/XDR tools (CrowdStrike, Defender, Carbon Black)</p>
</li><li><p>Log analysis and event correlation</p>
</li><li><p>Network traffic analysis (Wireshark, Zeek, tcpdump)</p>
</li></ul></li><li><p>Cloud security and IAM investigation experience preferred.</p>
</li><li><p>Familiarity with MITRE ATT&amp;CK mapping and detection engineering.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Technical Skills &ndash; Red Team</b></h2>
<ul><li><p>Experience with:</p>
<ul><li><p>Penetration testing methodologies</p>
</li><li><p>Adversary emulation and attack simulation</p>
</li><li><p>Exploitation frameworks (e.g., Metasploit, Cobalt Strike or equivalents)</p>
</li><li><p>Privilege escalation techniques</p>
</li><li><p>Lateral movement techniques</p>
</li><li><p>Evasion and obfuscation methods</p>
</li></ul></li><li><p>Understanding of Active Directory attacks, phishing frameworks, and payload development is a plus.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Analytical &amp; Communication Skills</b></h2>
<ul><li><p>Strong written documentation skills explaining technical reasoning.</p>
</li><li><p>Ability to think from both attacker and defender perspectives.</p>
</li><li><p>Structured, logical analysis of complex security scenarios.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Preferred Qualifications</b></h2>
<ul><li><p>Certifications such as:</p>
<ul><li><p>OSCP, OSEP, CRTO (Red Team)</p>
</li><li><p>GCIA, GCFA, GCIH (Blue Team)</p>
</li><li><p>CISSP</p>
</li></ul></li><li><p>Experience mentoring junior analysts or red team members.</p>
</li><li><p>Scripting proficiency (Python, PowerShell, Bash).</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Why Join</b></h2>
<ul><li><p>Contribute to next-generation AI systems for cybersecurity.</p>
</li><li><p>Work at the intersection of offensive and defensive security research.</p>
</li><li><p>High-impact role shaping AI reasoning about real-world cyber threats.</p>
</li><li><p>Flexible engagement suited for senior practitioners.</p>
</li><li><p>Collaborate with leading AI researchers and security experts.</p>
</li></ul><p>We consider all qualified applicants without regard to legally protected characteristics and provide reasonable accommodations upon request.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>Contract and Payment Terms</b></h2>
<ul><li>You will be engaged as an independent contractor.</li>
<li>This is a fully remote role that can be completed on your own schedule.</li>
<li>Projects can be extended, shortened, or concluded early depending on needs and performance.</li>
<li>Payments are weekly on Stripe or Wise based on services rendered.</li></ul></div></div></div>

SOC Analyst - Remote

Search 3171+ Soc analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

3171 soc analyst jobs Near Me

SOC Analyst

SOC Analyst L1

SOC Analyst Intern

SOC Analyst L1

SOC ANALYST - DLP

SOC Analyst Level 1

SOC Analyst - Remote