SOC Analyst L1

SOC Analyst - Junior (L1)

Experience: 0-2 years | Department: Infosec

Roles and Responsibilities: • Perform real-time monitoring of security events from multiple log sources. • Daily tracking of events, alerts, and requests. • Perform first-level triage of alerts and escalate confirmed incidents to L2 with proper evidence. • Monitor SIEM components and analyze logs to ensure relevant security information is gathered. • Use the SIEM tool to document security incidents and responses daily. • Detect suspicious logs and create reports and charts for easy understanding. • Perform first-level phishing email analysis (headers, URLs, attachments). • Investigate basic alerts triggered by endpoints, email gateway, and antivirus. • Handle queries and requests through calls and emails. • Track vulnerability and patch status and follow up on closure. • Assist in conducting security awareness training. • Follow SOPs, playbooks, and shift handover procedures. • Work as part of a team to ensure corporate data and technology platform components are safeguarded from known threats.

• 0-2 years of experience with a Bachelor's degree in Computer Science, or a related technical domain from reputed organizations.
• Should have exposure to SIEM tools like QRadar, LogRhythm, sentinelone, Log360 and endpoint security like EDR, XDR (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint).
• Should have worked on SIEM tools like QRadar, LogRhythm, sentinelone and endpoint security like EDR, XDR (CrowdStrike, SentinelOne).
• Should have basic knowledge of any DLP solution from any vendor.
• Good written and verbal communication, and willingness to work in shifts.
• Certifications such as CompTIA Security+ or CEH are an added advantage.