SOC Analyst L1

About the role

The Security Operations Center (SOC) Analyst L1 monitors security events, triages alerts and supports the continuous protection of the organization’s digital assets. Working in a 24x7 environment, you will collaborate with Level 2 and Level 3 teams to ensure rapid incident response and ongoing improvement of security services.

Key responsibilities

• Continuously monitor the security alerts queue using SIEM and EDR solutions.
• Tri­age alerts, assess severity and collect necessary context for Level 2 escalation.
• Monitor health and performance of security sensors and SIEM infrastructure.
• Produce scheduled and ad‑hoc security reports.
• Collaborate closely with Level 2 and Level 3 analysts to improve processes and tooling.
• Participate in a rotating day/night shift schedule, including weekends and holidays.

Required profile

• 1‑2 years of experience or training in a SOC, IT, or information‑security environment (preferred).
• Strong analytical and problem‑solving abilities.
• Excellent written and verbal communication skills.
• Ability to follow playbooks, work independently and collaborate with team members.
• Passion for cybersecurity and a willingness to stay current with emerging threats and technologies.

Required skills

• Knowledge of SIEM (Security Information and Event Management) platforms.
• Familiarity with EDR solutions.
• Programming basics in SQL, C, C++, C#, Java or PHP.
• Solid understanding of TCP/IP, networking, routing and switching.
• Basic knowledge of IDS/IPS, penetration testing and vulnerability assessment.
• Experience with firewalls and intrusion detection/prevention protocols.
• Proficiency with Windows, UNIX and Linux operating systems.
• Experience using network protocol and packet‑analysis tools.
• Understanding of anti‑virus and anti‑malware technologies.
• Good reporting and documentation skills.