Security SOC Analyst - Managed Services (L1)

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Data Analysis

In short

The Security Operations Center (SOC) Analyst - L1 is responsible for 24x7 security monitoring, event analysis, incident triage, and initial response activities. This role involves monitoring security alerts, performing preliminary investigations, and escalating confirmed incidents to higher support levels. Experience with SIEM monitoring and incident handling is preferred.

Responsibilities

Monitor security alerts and events from SIEM, EDR, IDS/IPS, Firewall, Proxy, and Cloud Security solutions.
Perform initial triage and analysis of security incidents.
Investigate suspicious activities and determine potential impact.
Escalate high-severity incidents to L2/L3 SOC teams based on defined escalation procedures.
Document security incidents, findings, and actions taken in ticketing systems.
Monitor security dashboards and ensure timely alert handling as per SLA.
Support incident response activities during security events.
Conduct log analysis from various security devices and systems.
Identify false positives and reduce alert fatigue through proper analysis.
Maintain incident records, playbooks, and operational documentation.
Participate in shift handovers and provide detailed incident updates.
Follow security policies, procedures, and compliance requirements.

Requirements

1 to 3 years of experience in SOC, Security Operations, Cyber Security, or IT Operations.
Experience with SIEM monitoring and incident handling is preferred.
Splunk Enterprise Security
OT/Security
Armis
Qualys
ServiceNow or equivalent ITSM platform
Incident Management Processes
Basic Threat Intelligence concepts

Desired Qualifications

Freshers with cybersecurity certifications may also be considered.

Benefits

24x7 security monitoring, event analysis, incident triage, and initial response activities.
First line of defense by monitoring security alerts, identifying potential threats, performing preliminary investigations, and escalating confirmed incidents to higher support levels.
Global technology company, home to over 223,000 people across 60 countries.
Delivering industry-leading capabilities centered around digital, engineering, cloud and AI.
Works with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services.
Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.

Skills

Splunk Enterprise SecurityOT/SecurityArmisQualysServiceNowSIEMEDRIDS/IPSFirewallProxyCloud SecurityIncident ManagementThreat Intelligence

#SOC#Security#Cyber Security#IT Operations#SIEM#Incident Response

About HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

See all open jobs at HCLTech Read more about HCLTech Website