L1 SOC Analyst (Threat Monitoring)

About the role

We are seeking an L1 SOC Analyst to join our Security Operations Center. In this entry‑level position you will monitor security alerts, perform initial triage, and help ensure rapid detection and escalation of incidents using industry‑leading tools.

Key responsibilities

• Monitor real‑time alerts from SIEM platforms and other security tools.
• Conduct Level 1 triage by analyzing logs, network traffic, and endpoint events.
• Investigate suspicious activity, document findings, and escalate according to SOC procedures.
• Correlate data from multiple sources to identify potential threats.
• Coordinate with Level 2/3 analysts for complex investigations and provide detailed incident reports.
• Maintain health of SIEM alerts, fine‑tune rules, and report false positives.
• Assist in forensic data collection and support compliance/audit documentation.

Required profile

• Bachelor’s degree (preferred) or equivalent technical background.
• Basic to intermediate knowledge of network security, TCP/IP, and troubleshooting.
• Familiarity with SIEM platforms such as IBM QRadar, Splunk, ArcSight, Microsoft Sentinel, or LogRhythm.
• Understanding of log analysis, firewalls, IDS/IPS, endpoint security, and anti‑malware solutions.
• Awareness of MITRE ATT&CK, NIST Cybersecurity Framework, CIS Controls, and ISO 27001.

Required skills

• Network security and TCP/IP fundamentals
• SIEM tools (IBM QRadar, Splunk, ArcSight, Microsoft Sentinel, LogRhythm)
• Log analysis and interpretation
• Firewalls, IDS/IPS, endpoint and anti‑malware solutions
• MITRE ATT&CK framework
• NIST, CIS, ISO 27001 knowledge
• Phishing and suspicious file investigation
• Incident response and escalation procedures
• Linux/Unix and Windows operating systems
• Web, mail, DNS, authentication services
• Vulnerability management basics
• Threat intelligence utilization