SOC L1 Analyst

Role Overview

Key Responsibilities

• Monitor and triage alerts across SIEM, NDR, EDR, and SOAR platforms.
• Investigate security events, gather evidence, document findings, and escalate confirmed threats.
• Support investigations involving malware, phishing, persistence, lateral movement, and suspicious activity.
• Use SOAR, case management, and Jira ITSM during incident management.

Key Qualifications

• 3–5 years of relevant cybersecurity or SOC experience is required.
• A Bachelor’s degree in Cybersecurity, Computer Science, or IT, or equivalent experience, is required.
• Strong knowledge of Windows/Linux, TCP/IP, DNS, HTTP/S, VPNs, firewalls, and packet analysis is required.
• Familiarity with Azure, AWS, or GCP security logging and detection is preferred.
• Understanding of phishing, SPF, DKIM, DMARC, malware, and MITRE ATT&CK is required.
• Hands-on SIEM and EDR experience with Microsoft Defender, CrowdStrike, Elastic, LogRhythm, or Sentinel is required.
• Strong analytical, communication, documentation, and problem-solving skills are required.
• The candidate must be able to work in a 24/7 shift-based environment.