- Logswhat you read all day
- Splunkmost used in Kochi
- Shiftsincluding night duty
- ₹3–4 lakhtypical fresher start at an MNC
The Security Operations Centre (SOC) is where most people in Kerala start their cybersecurity career. If you've heard the term but aren't sure what the job involves, here's what a SOC L1 analyst actually does, which tools Kochi employers use, what the shifts are like, and what gets freshers shortlisted.
What a SOC L1 analyst does
Every system in a company keeps logs: records of what happened. If someone tries to log in and types the wrong password, a record of that failed attempt is saved. A SOC analyst's job is to read these logs and spot the ones that mean trouble.
For example, one failed login is just a typo. But ten wrong passwords in ten seconds from the same source is almost certainly an attacker trying to break in. The L1 analyst notices this, confirms it, and reports it to the next level (L2), who investigates and responds.
How an alert travels through a SOC
- Logs collectedFrom servers, PCs and firewalls
- SIEM alertsSplunk, QRadar or Wazuh
- L1 analysesReal attack or false alarm?
- Report to L2Who investigates and responds
The tools: Splunk, QRadar and Wazuh
Logs are collected and searched in a SIEM (security information and event management) tool. In Kochi, Splunk is the one you'll see most, QRadar is also common, and Wazuh is used less.
But Wazuh is the best one to learn on. It's open source, so you can install it at home and try every feature yourself, which isn't possible with the commercial tools. And the skills transfer: the process you follow in Wazuh is the same one you'll follow in QRadar or Splunk. Get really good at one SIEM and the others become easy.
Shifts and night duty
SOCs watch systems around the clock, so most SOC roles involve shift work. Some roles have night duty, some morning shifts, and many rotate between them. It suits some people well and others not at all. Think about it practically before you aim for a SOC role.
Who hires SOC analysts in Kochi
Many MNCs and IT service companies at Infopark and across Kerala hire for security roles. Companies such as TCS, Wipro, Infosys, UST and Tech Mahindra hire for these roles, though not all of them are based at Infopark. One of our recent students joined Tech Mahindra while still halfway through the CEH batch.
Salary: experience first
At a standard MNC in India, freshers usually start at around ₹3–4 lakh a year; some start higher, like the student who joined Tech Mahindra at 5.5 LPA. Don't let the first salary decide which job you take. The first job is about getting in and gaining experience; negotiate when you move to your second job.
How to get shortlisted for a SOC role
- A good degree Most MNCs filter on it first. See which degree we recommend.
- Any relevant work experience Even an internship counts.
- Proof you've seen real attacks Build a home lab, simulate attacks yourself, and analyse the logs they leave behind.
- Hands-on SIEM practice Set up Wazuh and get comfortable with it, so you can talk about it in the interview.
- A resume that shows the work List the specific things you've done: the labs, attacks you detected and tools you used, not just course names.
A recognised certification helps too: most job posts in India ask for CEH.
Start with the basics
Build the skills a SOC looks for
Our 50 Days Ethical Hacking Challenge teaches networking, attacks and log-reading fundamentals in Malayalam, and our CEH v13 training takes you to the certification employers ask for.
Keep reading
Frequently asked questions
What does a SOC L1 analyst do?
Reads security logs in a SIEM tool, spots signs of attacks such as many failed logins in a few seconds, and reports confirmed incidents to the L2 team.
Which SIEM tool should I learn for SOC jobs in Kochi?
Kochi employers mostly use Splunk and QRadar, but learn on Wazuh first: it's open source, so you can practise every feature at home, and the skills transfer to the other tools.
Do SOC jobs have night shifts?
Usually, yes. Most SOC roles involve rotating shifts, including nights.
What is the salary of a SOC analyst fresher?
Around ₹3–4 lakh a year at a standard MNC in India, sometimes more. Focus on experience in your first job.
How do I get shortlisted for a SOC job?
A good degree, any work experience or internship, home labs where you simulated attacks and analysed logs, hands-on SIEM practice, and a resume that shows the work you've done.