NOC + SOC Analyst (L1)
Experience: 2-4 Years
Location: Chennai
Shift: 24x7 Rotational Shifts
Role Summary
We are seeking a proactive NOC + SOC
Analyst (L1) to provide first-level monitoring, alert triage, incident
management, and operational support across network, cloud, infrastructure, and
security environments. The role will be responsible for continuous monitoring
of operational and security queues, performing initial investigations,
executing runbooks, and ensuring timely escalation of incidents to L2 teams
while maintaining SLA adherence. The ideal candidate should possess hands-on
experience with monitoring platforms, endpoint security tools, security alert
analysis, and data-driven troubleshooting.
Key Responsibilities
Infrastructure & Network Operations
- Monitor infrastructure, cloud, application, and network health
using Datadog and other monitoring platforms.
- Perform initial troubleshooting of server, network, cloud, and
application alerts.
- Identify service degradation, outages, and performance
anomalies.
- Create, update, and manage incidents through ITSM platforms.
- Escalate unresolved issues to appropriate technical teams
following established procedures.
Security Operations
- Monitor and triage security alerts generated by CrowdStrike,
cloud platforms, identity services, and security monitoring tools.
- Analyze endpoint, identity, cloud, and authentication-related
events.
- Perform first-level investigation and validation of security
incidents.
- Execute documented runbooks and escalation procedures for
security events.
- Ensure rapid escalation of high-priority and suspicious
activities to SOC L2 teams.
Incident & Queue Management
- Maintain operational and security queue coverage during
assigned shifts.
- Perform evidence-based alert disposition and documentation.
- Ensure incidents are categorized, prioritized, and updated
accurately.
- Support incident response activities and service restoration
efforts.
- Provide comprehensive shift handovers with clear status updates
and pending actions.
Data Analysis & Reporting
- Perform basic log analysis using Databricks and SQL queries.
- Investigate operational and security events using data from
multiple sources.
- Assist in trend analysis, recurring issue identification, and
reporting activities.
- Support operational dashboards and monitoring reviews.
Technical Skills
Monitoring & Operations
- Datadog (Preferred)
- ServiceNow or Jira or equivalent ITSM platforms
- Infrastructure and application monitoring concepts
Security Operations
- CrowdStrike Falcon
- Microsoft Defender / EDR-XDR concepts
- SIEM fundamentals (Sentinel, Splunk, QRadar, or similar)
- Security alert triage and incident management
Cloud & Infrastructure
- Windows Server and Linux administration fundamentals
- Active Directory / Entra ID
- Microsoft Azure and AWS fundamentals
- TCP/IP, DNS, DHCP, VPN, Routing & Switching
Data Analysis
- Basic Databricks knowledge
- SQL query execution and analysis
- Log analysis and event correlation
Preferred Certifications
- ITIL 4 Foundation
- Microsoft SC-900
- CompTIA Security+
- AZ-900 or AWS Cloud Practitioner
- CrowdStrike Falcon Fundamentals (Preferred)
- Datadog Fundamentals Certification (Preferred)
- CCNA (Added Advantage)
Required Competencies
- Strong troubleshooting and analytical skills
- Ability to investigate alerts across network, endpoint, cloud,
and identity environments
- Good documentation and communication skills
- Ability to follow runbooks and operational procedures
- Experience working in a 24x7 support environment
- Customer-focused mindset with strong collaboration skills
- Ability to provide structured and high-quality shift handovers