01Overview
SOC L1 Enginner \_ Only FACE TO FACE interview with Immedaite JOINER
Good Day
Greetings from Ssquad Kindly check the Job Description.
Please find the details for your reference.
Company : Ssquad Global (www.ssquad.com)
Location: Bangalore
Work Mode: On-site (WFO, 5 days/week)
24\*7 Support ,Employment Type: Full time
Availability: Immediate joiners preferred
Experience: 3-5 years
Salary: As per market standards
Interview Process:Face-to-Face( Only Bangalore ITPL)
L1 SOC Engineer Roles & Responsibilities
- Monitor security alerts and events using SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, Securonix, ArcSight, or LogRhythm.
- Perform 247 monitoring of security incidents across network, endpoint, cloud, email, and identity platforms.
- Analyze and triage security alerts to determine whether they are genuine threats or false positives.
- Monitor security solutions including EDR/XDR, IDS/IPS, Firewalls, DLP, WAF, Email Security, and Cloud Security.
- Investigate suspicious activities using logs from Windows, Linux, Active Directory, Azure AD/Entra ID, VPN, Proxy, and network devices.
- Escalate confirmed or high-severity security incidents to L2 SOC Analysts with complete investigation details.
- Create, update, and maintain incident tickets in the ITSM/ticketing system while ensuring SLA compliance.
- Execute predefined incident response playbooks and standard operating procedures (SOPs).
- Perform initial malware, phishing, ransomware, brute-force, unauthorized access, and suspicious login investigations.
- Monitor SIEM health, log collection status, and log source availability.
- Prepare daily shift reports, incident summaries, and shift handover documentation.
- Coordinate with internal teams and customers during incident handling and follow-up activities.
- Stay updated on emerging cyber threats, vulnerabilities, and threat intelligence feeds.
- Support vulnerability management, compliance activities, and security audits when required. .
