Job Description

We are looking for a L1 SOC Analyst with 1.5 to 2 years of experience in security incident monitoring, alert triage, and basic investigation. The candidate will monitor security alerts, validate incidents, create tickets, and escalate confirmed threats to L2 analysts.

As our SOC Analyst, you will be required to:

• Monitor security alerts from SIEM and security tools.
• Perform initial triage of alerts and incidents.
• Identify false positives and true positives.
• Create and update incident tickets with proper details.
• Escalate confirmed or suspicious incidents to L2 SOC Analysts.
• Follow SOC playbooks and standard operating procedures.
• Review alerts related to malware, phishing, suspicious login, endpoint alerts, and network activity.
• Support shift handover and daily SOC reporting.
• Assist in SIEM migration and alert validation activities.

To apply for this role, you should possess the following skills, experience and qualifications:

• 1.5 to 2 years of SOC monitoring experience.
• Basic knowledge of SIEM tools such as AlienVault, Splunk, QRadar, Sentinel, CrowdStrike, or SentinelOne.
• Basic understanding of cyber threats such as phishing, malware, brute force, suspicious login, and endpoint alerts.
• Knowledge of Windows, Linux, networking, Active Directory, and basic cloud concepts.
• Experience with ticketing tools such as ServiceNow, Jira, or similar.
• Good communication and documentation skills.
• Willingness to work in rotational shifts.

If this role excites you, please take a moment to complete the questionnaire below and attach your current resume. We look forward to your prompt response.