SOC L1

Responsibilities:

• Monitor and analyze security alerts generated by Securonix SIEM.
• Perform initial triage of security incidents based on risk scores and behavioral analytics.
• Escalate security incidents to L2 for deeper investigation.
• Assist in fine-tuning Securonix correlation rules to reduce false positives.
• Document incidents, investigation steps, and outcomes in the incident management system.
• Support phishing investigations and basic threat analysis.
• Follow standard operating procedures (SOPs) for incident response.

Requirements:

• Bachelor's degree in Cybersecurity, IT, or related field.
• Basic knowledge of SIEM and User Entity Behavior Analytics (UEBA).
• Understanding of security frameworks (NIST, SOC 2, MITRE ATT&CK).
• Strong analytical skills and attention to detail.

Certifications like Securonix Security Analyst, Security+, or Microsoft SC-900 (preferred).