SOC Analyst Salary in India (2026): Fresher to L3, by Company and City
By Deepak Sharma.
Published . 10 min read
Topics: Cyber Security, Salary, SOC Analyst, India, Original Research
By Deepak Sharma, BootcampGuide. Every salary figure below was read off the source's own page on 28 October 2026, with the sample size and update date it shows. We quote ranges as published and do not average sources together. See sources.
A SOC analyst in India typically earns ₹5.3 lakh to ₹5.8 lakh a year with one to five years' experience, according to AmbitionBox's 12,300 salary reports, updated 27 October 2026. That is about ₹44,000 to ₹48,000 a month before tax and PF (our arithmetic). L1 analysts with one to three years earn ₹4.7 lakh to ₹5.2 lakh, L2 analysts ₹9.3 lakh to ₹10.3 lakh, and senior SOC analysts ₹9.7 lakh to ₹10.7 lakh.
The biggest jump in a SOC career is the move from L1 to L2, not the first job. Below are the figures by level, experience, company, city and industry, what freshers actually get, and why the sources disagree.
SOC analyst salary in India at a glance
| Level | Typical salary | Experience | Salary reports |
|---|---|---|---|
| SOC Analyst (all levels) | ₹5.3 L to ₹5.8 L | 1 to 5 years | 12,300 |
| SOC Analyst L1 | ₹5.3 L to ₹5.8 L | 0 to 5 years | 3,400 |
| SOC Analyst L2 | ₹9.3 L to ₹10.3 L | 2 to 7 years | 1,100 |
| Senior SOC Analyst | ₹9.7 L to ₹10.7 L | 2 to 9 years | 741 |
Source: AmbitionBox, read 28 October 2026; pages updated 25 to 27 October 2026. "Typical" is AmbitionBox's own label for the range. AmbitionBox has no separate L3 page; Senior SOC Analyst is the closest title.
Key takeaway: L1 pay at the big IT services firms is nearly flat, mostly ₹4 lakh to ₹5 lakh. What moves your salary is reaching L2, where the typical range is about 75% higher (₹9.3 lakh to ₹10.3 lakh against ₹5.3 lakh to ₹5.8 lakh), and moving out of IT services into banking, consulting or a product company.
SOC analyst salary by experience
| Experience | L1 | L2 | Senior SOC Analyst |
|---|---|---|---|
| 0 to 1 year | ₹3.6 L to ₹5 L (8 reports) | – | – |
| 1 to 3 years | ₹4.7 L to ₹5.2 L | ₹6 L to ₹6.7 L | – |
| 3 to 6 years | ₹6 L to ₹6.7 L | ₹8.9 L to ₹9.8 L | ₹8.8 L to ₹9.7 L |
| 6 to 9 years | – | ₹13.6 L to ₹15.6 L | ₹12.2 L to ₹13.5 L |
| 9 to 12 years | – | – | ₹13.5 L to ₹19.3 L (19 reports) |
AmbitionBox, by title and experience band. A dash means AmbitionBox shows no band for that title. Bands built on fewer than 20 reports are marked.
Two patterns stand out. First, an L1 analyst with three to six years earns ₹6 lakh to ₹6.7 lakh, while an L2 with the same experience earns ₹8.9 lakh to ₹9.8 lakh: the title is worth about ₹3 lakh a year at the same seniority. EICTA, an IIT Kanpur-linked training consortium that sells cyber security courses, says the move from L1 to L2 "often produces a 40 to 80 percent salary increase", and at the same three-to-six-year band AmbitionBox shows about 48% (our arithmetic on the midpoints). Second, pay keeps climbing past six years only if you keep moving up. An L2 with six to nine years earns ₹13.6 lakh to ₹15.6 lakh.
PayScale, with smaller samples, tells the same story. Its Junior SOC Analyst median is ₹4,86,053 from 35 profiles (updated 28 September 2026). Its Senior SOC Analyst average total pay is ₹6,83,000 at one to four years and ₹11,94,979 at five to nine years, from 16 and 11 salaries.
SOC analyst salary for freshers
This is where the data is thinnest, and where the advertised numbers are highest. Here is everything we found for someone with no experience:
| Source | Figure | Based on |
|---|---|---|
| AmbitionBox, SOC Analyst L1, 0 to 1 year | ₹3.6 L to ₹5 L | 8 salary reports |
| PayScale, Cyber Security Analyst, under 1 year | ₹4,73,098 average total pay | 82 salaries |
| PayScale, Information Security Analyst, under 1 year | ₹3,46,499 average total pay | 31 salaries |
| EICTA (IIT Kanpur), fresher without a certification | ₹4 L to ₹5 L | Not stated |
| EICTA (IIT Kanpur), fresher with Security+ or CEH | ₹6 L to ₹8 L | Not stated |
Plan on ₹3.5 lakh to ₹5 lakh for a first SOC job. EICTA's ₹6 lakh to ₹8 lakh for a certified fresher is higher than every salary dataset we checked, and EICTA does not say where it comes from; read it as a training provider's claim, not a market figure. A certification does help you get shortlisted, as the job postings below show. But no dataset we found shows freshers with one earning ₹6 lakh to ₹8 lakh.
The market has also tightened at the bottom. The DSCI and SANS skilling report for 2025-26 notes that "organizational operations are adapting to technologies such as AI, leading to a reduction in entry-level job roles." AmbitionBox records "2% growth in average salary over the last 2 years" for SOC analysts, and a 5% drop for L2.
SOC analyst salary by company
| Company | SOC Analyst, 3 to 6 years | SOC Analyst L1, all years |
|---|---|---|
| TCS | ₹4.9 L to ₹5.4 L (852 reports) | ₹4 L to ₹4.5 L |
| Wipro | ₹4.8 L to ₹5.3 L | ₹4.4 L to ₹5 L |
| Infosys | ₹4.6 L to ₹5.1 L | – |
| Capgemini | ₹5.1 L to ₹5.6 L | – |
| Tech Mahindra | ₹5.2 L to ₹5.7 L | ₹4.1 L to ₹4.9 L |
| IBM | ₹5.3 L to ₹5.9 L | ₹3.2 L to ₹4.3 L |
| HCLTech | ₹5.4 L to ₹6 L | ₹3.9 L to ₹4.7 L |
| Accenture | ₹5.8 L to ₹6.4 L | ₹4.9 L to ₹6.3 L |
| Cognizant | ₹6.1 L to ₹6.9 L | – |
| Deloitte | – | ₹4.6 L to ₹6 L |
| NTT DATA | – | ₹6.3 L to ₹7.5 L |
AmbitionBox's SOC Analyst page lists the most-reported companies under its 3 to 6 year tab; its L1 page lists companies across all years. A dash means the company is not in that list.
The big IT services firms, which hire the most SOC analysts, cluster within about ₹1 lakh of each other. The companies that pay more are elsewhere. AmbitionBox's highest-paying SOC employers are eClinicalWorks (₹9.8 lakh to ₹12.9 lakh), Optiv (₹9.2 lakh to ₹13.5 lakh), OculusIT (₹7.6 lakh to ₹9.5 lakh), PwC (₹7.3 lakh to ₹9 lakh) and HARMAN (₹7 lakh to ₹8.5 lakh). At L2 the spread is wider still: TCS ₹5 lakh to ₹6.1 lakh, Deloitte ₹9 lakh to ₹12 lakh, PwC ₹9.1 lakh to ₹13.5 lakh, and Marvell ₹19.8 lakh to ₹24.3 lakh.
SOC analyst salary by industry
| Industry | Typical salary |
|---|---|
| Financial services | ₹7.6 L to ₹8.4 L |
| Management consulting | ₹6.7 L to ₹7.4 L |
| Software product | ₹6.2 L to ₹6.8 L |
| Telecom | ₹6.1 L to ₹6.8 L |
| IT services and consulting | ₹5 L to ₹5.6 L (7,800 reports) |
Most SOC analysts work in IT services, which pays the least. Financial services pays about ₹2.6 lakh to ₹2.8 lakh a year more for the same title. One sensible route is two or three years in an IT services SOC, then a move to a bank, a consultancy or a product company once you have L2 experience.
SOC analyst salary by city
| City | SOC Analyst | SOC Analyst L2 |
|---|---|---|
| Bengaluru | ₹5.2 L to ₹5.7 L (4,400 reports) | ₹8 L to ₹9.1 L |
| Hyderabad | ₹5.2 L to ₹5.8 L (3,300 reports) | ₹8.2 L to ₹9.6 L |
| Gurugram | ₹5.2 L to ₹5.8 L | – |
| Pune | ₹5 L to ₹5.6 L | ₹6.4 L to ₹8.4 L |
| Chennai | ₹5 L to ₹5.5 L | – |
| Mumbai | ₹5 L to ₹5.5 L | ₹7.2 L to ₹9.1 L |
| New Delhi | – | ₹6.2 L to ₹8.4 L |
City matters less than company. Across the five largest SOC cities, typical pay differs by about ₹30,000 a year. Bengaluru and Hyderabad hold most of the jobs between them, 7,700 of AmbitionBox's 12,300 reports, so that is where most openings are.
What L1, L2 and L3 SOC analysts do
- L1 (triage): watches the SIEM console, sorts alerts into false positives and real incidents, follows playbooks and escalates. This is the fresher entry point, usually on 24x7 rotational shifts.
- L2 (investigation): takes escalated incidents, investigates across logs, endpoint and network data, contains threats, and tunes detection rules so L1 gets fewer false alarms. Usually needs two to three years at L1.
- L3 or senior (response and hunting): leads major incidents, hunts for threats that no rule caught, writes detections and often moves into incident response, threat intelligence or SOC management.
The skills that move you from L1 to L2 are the ones a good course should teach beyond tool-clicking: networking, Linux and Windows internals, log analysis and scripting. Our breakdown of cyber security course syllabi shows which courses cover them.
What SOC job postings ask for
We read current SOC analyst postings for Zensar (L1.5, Hyderabad) and Genpact (Bengaluru, Hyderabad and Delhi NCR). The common requirements:
- Shifts: both ask for "24x7 rotational shifts". Night shifts come with the job at L1 and L2.
- SIEM tools: Microsoft Sentinel, Splunk and IBM QRadar, with Microsoft Defender or CrowdStrike for endpoint detection.
- Certifications, listed as preferred rather than required: Microsoft SC-200, CompTIA Security+ and CEH.
- Experience: two to three years for Genpact's role, three to six for Zensar's L1.5.
Neither posting requires a certification. They are listed as preferred, and they help most when you have no experience to show instead. Both postings named Microsoft Sentinel, and both preferred SC-200, Microsoft's certification for it. What each certification costs in India, from ISC2 CC to CEH, is in our comparison of cyber security course fees.
Is SOC analyst a good career in India?
Demand is real, and so is the gap between job seekers and the jobs. In the DSCI and SANS skilling report for 2025-26, "73% of enterprises and 68% of providers report a limited availability of skilled cyber security candidates", and "84% of organizations report that it takes between one to six months to fill cyber security roles." The same report says "63% of enterprises and 59% of providers report limited hands-on practical skills among job candidates".
ISC2's India findings from its 2025 workforce study, based on 524 security professionals in India, point the same way. 97% reported at least one skills need in their team, and "security analysis" was named by 34%. Staff shortages eased, from 59% of respondents in 2024 to 48% in 2025.
Taken together: employers are short of people who can actually do the work, not short of applicants. The jobs go to candidates with hands-on lab practice and a SIEM tool on their CV. A certificate alone is not enough.
Why salary sites disagree
| Source | Figure | Sample | Updated |
|---|---|---|---|
| AmbitionBox, SOC Analyst | ₹5.3 L to ₹5.8 L typical | 12,300 | 27 Oct 2026 |
| PayScale, Junior SOC Analyst | ₹4,86,053 median | 35 | 28 Sep 2026 |
| PayScale, Senior SOC Analyst | ₹7,14,934 average | 20 | 30 Aug 2026 |
| PayScale, Cyber Security Analyst | ₹5,81,061 average | 311 | 7 Oct 2026 |
| Indeed India, SOC Analyst | ₹6,42,301 average | 4 | 13 Oct 2026 |
Each site counts something different. AmbitionBox and PayScale use self-reported salaries; Indeed mixes in pay advertised in job postings. Titles also overlap: "SOC analyst", "security analyst" and "cyber security analyst" are often the same job under different names. We lead with AmbitionBox because its sample is hundreds of times larger than PayScale's SOC pages and was updated on 27 October 2026. Indeed's average rests on four salaries and should not be quoted on its own. Glassdoor blocks automated reading, so we could not check its figures on the page and have left them out.
Does a cyber security course pay for itself?
At a typical ₹5.3 lakh, a SOC analyst earns about ₹44,000 a month before deductions. C-DAC's 24-week PGCP-ITISS, at ₹1,16,820 with GST, is about two and a half months of that. Simplilearn's ₹1,99,999 programme is about four and a half months. A free route through Cisco's 120-hour Junior Cybersecurity Analyst path, plus an ISC2 CC exam at $199, costs about ₹19,000 (our arithmetic). The fee only pays off if it gets you the job. The skills hiring managers say candidates lack are hands-on ones, so judge a course by its lab hours and SIEM practice rather than its certificate.
Compare cyber security programmes by format, duration and fee in the full course listing, or browse all institutes side by side. If you are still choosing between fields, whether a coding bootcamp is worth it works through the same salary-against-fee arithmetic for software roles, and our nine-step guide covers how to vet any programme before paying.
Sources and how we checked
All figures were read on 28 October 2026. AmbitionBox ranges are those shown to a visitor who is not logged in; we did not use figures it hides behind a login. PayScale figures are base pay unless marked as total pay. "L" means lakh rupees a year. Monthly figures are annual figures divided by 12, before tax and provident fund.
- AmbitionBox: SOC Analyst salary in India (12.3k salaries, updated 27 October 2026; experience, city, company and industry ranges)
- AmbitionBox: SOC Analyst 1 salary (3.4k salaries, updated 26 October 2026)
- AmbitionBox: SOC Analyst 2 salary (1.1k salaries, updated 27 October 2026)
- AmbitionBox: Senior SOC Analyst salary (741 salaries, updated 25 October 2026)
- PayScale: Junior SOC Analyst salary in India (35 profiles, updated 28 September 2026) and Senior SOC Analyst (20 profiles, updated 30 August 2026)
- PayScale: Cyber Security Analyst salary in India (311 profiles, updated 7 October 2026) and Information Security Analyst (114 profiles, updated 12 July 2026)
- Indeed India: SOC Analyst salaries (4 salaries, updated 13 October 2026)
- EICTA, IIT Kanpur: Cybersecurity Jobs in India 2026 (fresher salaries with and without a certification, L1 to L2 increase; 28 July 2026; no data source stated)
- DSCI and SANS: Indian Cyber Security Skilling Landscape Report 2025-26, press release (1 May 2026)
- ISC2: India findings from the 2025 Cybersecurity Workforce Study (524 respondents in India; 24 September 2026)
- Job postings: Zensar, SOC Analyst (L1.5), Hyderabad and Genpact, SOC Analyst, as listed on job boards in October 2026