SOC Security Analyst

Responsibilities

• Analyze and respond to security alerts from SIEM, IDS/IPS, and EDR tools
• Conduct incident triage to determine severity, impact, and scope
• Perform incident containment and escalation to L3 analysts
• Execute proactive threat hunting by analyzing logs and network traffic
• Monitor security infrastructure including firewalls and endpoint protection
• Manage and fine-tune SIEM and XDR tools
• Modify XDR playbooks and optimize automation workflows
• Prepare detailed incident reports and compliance documentation
• Provide guidance and mentorship to L1 analysts
• Engage with customers to explain security threats and mitigation steps

Requirements

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field
• 3+ years of experience in security operations or SIEM
• Hands-on experience with SIEM tools (Splunk, ArcSight, QRadar), endpoint protection, and IDS/IPS
• Strong understanding of IT infrastructure, networking, and cybersecurity principles
• Python scripting skills for troubleshooting and playbook development
• Excellent communication and problem-solving skills

Preferred Qualifications

• Security certifications such as CISSP, CISM, GCIA, or GCIH
• Experience with modern SIEM platforms like Palo Alto XSIAM or Google SecOps
• Exposure to SOAR platforms and security automation
• Knowledge of cloud security (AWS, Azure, or GCP)
• Experience in hybrid or cloud-based SOC environments

About the Company

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses, specializing in cybersecurity, customer experience, and cloud infrastructure.