SOC Analyst L1

Bloom Energy

Bloom Energy provides clean, reliable, and affordable energy solutions with advanced fuel cell technology.

SOC L1 analyst managing security tools, incident response, and threat monitoring.

2 days ago ago

Intermediate (4-7 years), Junior (1-3 years)

Full Time

Bengaluru, Karnataka, India

Office Full-Time

Company Size

1,100 Employees

Service Specialisms

Onsite Power Generation

Microgrid Solutions

Combined Heat & Power

Carbon Capture Technology

Hydrogen Fuel Cells

Biogas Fuel Systems

Electrolyzers / Hydrogen Production

Primary Power

Sector Specialisms

Technology

Logistics

Manufacturing

Real Estate

Energy

Hydrogen

Biogas

Natural Gas

Role

What you would be doing

threat hunting

siem administration

xdr deployment

dlp management

incident response

security architecture

Drive threat hunting initiatives using SIEM, XDR, and threat intelligence feeds to proactively identify suspicious activity.
Administer and maintain SIEM,SOAR platforms (e.g., Splunk ,Palo Alto Cortex XSOAR) to automate repetitive tasks, enrich alerts, and streamline incident response workflows.
Conduct tabletop exercises and red/blue team simulations to test and improve incident response readiness.
Administer and optimize Zscaler ZIA/ZPA for secure internet access and zero trust network access, including policy tuning, SSL inspection, and user segmentation.
Lead the deployment and lifecycle management of Data Loss Prevention (DLP) technologies, ensuring sensitive data is protected across all vectors (email, web, endpoint, cloud).
Administer and maintain Proofpoint for advanced email threat protection, including phishing defense, business email compromise (BEC) detection, and DMARC enforcement.
Conduct security architecture reviews and recommend improvements for application, infrastructure, and cloud security posture.
Ensure timely escalation and communication of critical incidents to leadership and affected business units.
Lead and coordinate the end-to-end incident response lifecycle: detection, triage, containment, eradication, recovery, and post-incident review.
Develop and maintain custom detection rules, parsers, and dashboards in SIEM and XDR platforms to improve visibility and reduce false positives.
Develop and maintain incident playbooks and runbooks for common attack scenarios (e.g., phishing, malware, insider threats).
Deploy and manage XDR solutions (e.g., SentinelOne, CrowdStrike, Microsoft Defender XDR) to unify telemetry across endpoints, cloud, and identity platforms for enhanced threat detection and response.
Conduct root cause analysis (RCA) and create detailed incident reports for stakeholders and compliance teams.
Lead proof-of-concept (PoC) evaluations for new security technologies and drive vendor selection processes.
Perform alert triaging and prioritize incidents based on severity, impact, and business context.
Perform security tool integrations with SIEM, ticketing systems, threat intelligence platforms, and vulnerability scanners.
Utilize MITRE ATT&CK and OWASP Top 10 frameworks to map adversary behavior and identify gaps in detection and response.
Implement, and manage enterprise-grade security solutions across network, endpoint, cloud, and email layers.
Collaborate with IT and DevOps teams to embed security controls in CI/CD pipelines and cloud infrastructure (AWS, Azure, GCP).

What you bring

malware

network security

owasp

mitre