SOC Analyst L1 - 24/7

We are looking for a dedicated L1 Security Operations Center (SOC) Analyst to join our cybersecurity team.

Functions:

• Monitor security events and alerts from various tools, including SIEM, IDS/IPS, EDR, and other security platforms.

• Perform initial triage and identification of security alerts based on established procedures.

• Escalate verified security incidents to L2 analysts following documented escalation procedures.

• Maintain accurate documentation of all security events and actions taken.

• Assist in initial incident response activities under supervision.

• Collect and preserve evidence related to security incidents.

• Follow established playbooks and standard operating procedures (SOP).

• Communicate incident status to the relevant stakeholders in a timely manner.

• Review and analyze security alerts to determine their legitimacy and potential impact.

• Perform basic searches and enrichment of IoCs (Indicators of Compromise) using threat intelligence platforms.

• Support L2/L3 analysts with data collection during threat hunting activities when requested.

• Stay up to date with the current threat landscape and emerging security trends.

• Create detailed incident reports and maintain accurate documentation of cases.

• Update security incident tracking systems with relevant information.

• Participate in post-incident reviews and lessons learned sessions.

• Contribute to knowledge base articles and procedure documentation.