Security Analyst (Fresher)
About Gruve
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.
Position summary:
Candidate will work as an entry-level SOC Level 0 Engineer to join our Security Operations Center (SOC).
The candidate will be responsible for monitoring security alerts, analyzing threats, and escalating incidents as needed. The ideal candidate should have a basic understanding of networking (CCNA-level), cybersecurity fundamentals.
Key Roles & Responsibilities:
• Alert Monitoring, Documentation & Reporting:
o Undergo training for 1 months to learn security monitoring concepts, primary analysis of the logs, network concepts, handling customer calls, etc.
o Assist our security engineers in their day-to-day functions, such as preparing reports and analyzing security traffic
o Perform initial triage of security incidents and escalate as needed.
o Investigate alerts related to network traffic, authentication failures, and potential threats.
o Conduct Alarms Drilldown on EDR/SIEM for deeper investigation.
o Perform Offline Log Analysis on EDR/SIEM to identify hidden threats.
o Manage incident response by creating and updating tickets in the ITSM tool.
o Prepare daily, weekly, monthly, and quarterly reports on security incidents and trends.
o Document security events, investigations, and recommendations in the ITSM tool.
o Ensure proper handover by understanding and acknowledging tasks from the previous shift.
Process Improvement & Playbook Adherence:
o Follow established SOC playbooks and procedures for incident handling.
o Provide regular updates and reports on learning and progress.
o Provide feedback on process gaps and suggest improvements for better efficiency.
o Ensure compliance with incident management guidelines and processes.
Collaboration & Communication:
o Work with L2 analysts and SOC leads to ensure smooth incident escalation.
o Communicate findings and recommendations clearly to relevant POC.
o Acknowledge and respond to customer emails promptly to maintain workflow continuity.
Learning & Skill Development:
o Stay updated with the latest cybersecurity threats, vulnerabilities, and attack techniques.
o Participate in training sessions and knowledge-sharing activities within the SOC team.
o Enhance use case understanding to improve accuracy in handling security alerts.
Basic Qualifications:
• Bachelor’s degree in computer science, IT, Cybersecurity, or a related field (or equivalent practical experience).
• Certifications: CCNA Security
• Good communication skills
• Good analytical skills
• Quick learner
• Team player
Preferred Qualifications:
• No required work experience in the IT security industry
• Relevant certifications such as CCNA, Comptia security+, and CEH are required.
Why Gruve
At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.
Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.