SOC Analyst Level 1

Monitor SIEM alerts, endpoint security events, and network telemetry in real time.

∙Perform initial triage on alerts to determine validity and severity.

∙Document incident details accurately in ticketing systems (TheHive/Zammad).

∙Escalate confirmed or suspicious alerts to SOC L2 analysts according to playbooks.

∙Follow standardized response procedures for phishing, malware, brute force attempts,

etc.

∙Assist with basic threat hunting activities under guidance.

∙Contribute to creation and validation of security detection rules.

∙Participate in shift rotations to ensure 24/7 SOC operations.

∙Support vulnerability scanning and patching notifications.

∙Maintain shift logs, incident registers, and SOC KPIs.

Job Type: Full-time

Education:

• Bachelor's (Preferred)

Experience:

• 3years: 1 year (Preferred)

License/Certification:

• CompTIA Security+ ∙CySA+ Microsoft SC-200 ∙Splunk/Qradar (Preferred)

Work Location: In person