Security Operations Analyst L1 – MS Defender

Job not on LinkedIn

🔥 3 minutes ago

🇮🇳 India – Remote

⏰ Full Time

🟢 Junior

🛡️ Security Operations

🚫👨‍🎓 No degree required

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Gruve

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2024

🤖 Artificial Intelligence

🔒 Cybersecurity

🏢 Enterprise

Artificial Intelligence • Cybersecurity • Enterprise

Gruve is an enterprise technology company that designs, builds, and operates AI-ready data center networks and delivers AI-driven solutions for businesses. The company provides Enterprise AI services (including LLM and advanced analytics deployments), AI infrastructure and GPU-rich compute environments, network automation, cybersecurity advisory and managed security services, and workload migration and platform modernization. Gruve positions itself as a provider of AI teammates, customer experience automation, and applied data strategy to help large organizations adopt and scale AI securely.

📋 Description

• Monitor Microsoft Defender portals, security dashboards, alerts and incident queues • Perform initial triage of malware detections, suspicious activities and endpoint security alerts • Review alert details, device information, severity and timestamps to assess potential impact • Perform basic checks on Defender sensor health, endpoint onboarding and protection status • Identify endpoints with failed scans, outdated security intelligence or protection-related issues • Escalate suspicious activities and high-severity alerts according to established procedures • Create, categorize, prioritize and update security incident tickets in ServiceNow or equivalent ITSM tools • Collect relevant alert evidence, device details, timestamps and investigation information • Perform approved first-level checks using documented security runbooks • Track incidents and coordinate with L2/SOC teams for investigation and remediation • Validate remediation status and endpoint protection recovery as directed • Follow Security Incident, Incident, Change and Request Management processes • Ensure timely alert acknowledgement, escalation and SLA compliance • Maintain accurate incident records, operational checklists and shift handover documentation • Coordinate with L2/L3, SOC, Endpoint, Identity and Infrastructure teams • Support routine security reporting, alert tracking and operational reviews • Identify recurring alerts and report monitoring or documentation gaps to L2 • Ensure effective APAC–EMEA–NLAM shift handovers and uninterrupted 24x7 monitoring

🎯 Requirements

• 1–3 years of experience in IT operations, security monitoring, endpoint support or security incident management • Basic understanding of endpoint security, antivirus, malware detection and security alerts • Familiarity with Microsoft Defender for Endpoint or equivalent endpoint protection tools • Basic knowledge of Windows operating systems, processes and endpoint health • Ability to review alerts, capture evidence and follow documented investigation procedures • Understanding of incident severity, escalation matrices and SLA requirements • Familiarity with ServiceNow or equivalent ITSM platforms • Good communication, documentation and shift handover skills • Strong attention to detail and adherence to security procedures • Willingness to work in rotational shifts in a 24x7 security operations environment • Microsoft SC-900 or equivalent security fundamentals certification • Basic knowledge of Microsoft Defender XDR and Microsoft Sentinel • Familiarity with malware, phishing, endpoint threats and common attack techniques • Basic PowerShell and Windows troubleshooting knowledge • Exposure to KQL, security dashboards and incident reporting • Understanding of ITIL and security incident management processes

🏖️ Benefits

• Dynamic environment with strong customer and partner networks • Culture of innovation, collaboration, and continuous learning • Diverse and inclusive workplace • Equal opportunity employer

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume