SOC Analyst

Company overview

Over 210 employees work across sales, engineering, consulting and the SOC. NL Security protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers.

The role

This role opened up after a team member moved internally. The Cyber Defence team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. Remote within India. The team meets in New Delhi once a quarter, travel covered. Please make sure you have a quiet place to work and a solid internet connection.

Your responsibilities

• Help with user access reviews and offboarding audits.
• Report on security awareness training and phishing simulation results.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Hand off open cases at shift change with clear notes.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Escalate confirmed incidents and follow the incident response plan.

Who you are

• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Basic scripting in PowerShell or Python.
• Familiarity with the MITRE ATT&CK framework.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Clear written communication for incident tickets and reports.
• Must be able to pass a background check.

Schedule: Four 10-hour shifts, Sunday to Wednesday, 6:00 AM to 4:30 PM

What we offer

Salary: ₹12,00,000 - ₹15,50,000 per annum

• Health insurance for you and your family.
• Provident fund.
• Paid leave.
• Flexible hours.

Please submit your CV in English.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at NL Security.