04 · Security
SOC Analyst
The 24×7 watchtower — detect, triage, escalate
- Fresher (India)
- ₹3 – 6 LPA
- Demand
What it is
A Security Operations Centre monitors alerts around the clock. As an L1 analyst you triage them: separate noise from real attacks, investigate, contain, and escalate. It is the single most common genuine entry point into security.
What you actually do all day
- 1Monitor SIEM dashboards and alert queues
- 2Triage alerts: false positive or real incident?
- 3Investigate logs to reconstruct what happened
- 4Escalate and document with a clear timeline
Core tech stack
SIEM
- Splunk
- Microsoft Sentinel
- QRadar
- Wazuh
Skills
- Log analysis
- MITRE ATT&CK
- Networking
Certs
- Security+
- Splunk Core
- Blue Team Level 1
Reality check: Night shifts are normal at L1 — but 2 years here opens most other security doors.
Good fit if: You are alert, methodical and fine with rotational shifts early on.
Your first step
Set up Wazuh or the ELK stack at home, generate attacks against a test VM, and hunt your own logs.