Associate SOC L1 Analyst

Educational Qualifications

Required Skills

• A strong desire to learn about different security technologies and understand how security operations function.
• A passion for information security and a commitment to developing a career in this field.
• Reliability, accountability, and a strong work ethic.
• Well-developed logical and analytical thinking skills, with the ability to investigate and analyze security incidents.
• Ability to work in a shift-based schedule.
• Excellent written and verbal communication skills in English.
• Good understanding of TCP/IP network traffic and event log analysis.
• Good understanding of operating systems, network architecture, and common system design principles.
• Understanding of general cybersecurity threats, vulnerabilities, and exploits, along with appropriate mitigation techniques.

Desirable Skills & Experience

Roles and Responsibilities

• Monitor and analyze cybersecurity alerts, events, and potential security incidents.
• Triage security alerts and create or update cases in the case management system to accurately document triggered alarms and detected threats.
• Ensure that all case information is complete, accurate, and up to date.
• Notify customers of security incidents and required mitigation activities, and support incident response throughout all phases of the incident management process by following established SOC procedures.
• Follow up on notifications, requests for information, and remediation activities to ensure timely resolution.
• Escalate incidents to Senior Analysts for further analysis, investigation, and guidance when required.
• Track and update cases and service requests based on new information, investigation findings, and stakeholder feedback.
• Coordinate with internal and external stakeholders to build and maintain positive working relationships.
• Support Senior Analysts in preparing Post-Incident Reviews (PIRs) and developing ad-hoc reports, dashboards, and metrics to measure and improve SOC operational effectiveness.
• Identify opportunities to improve processes, procedures, and services to enhance operational efficiency and continuously add value for customers.

Qualifications

• Relevant degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• One or more relevant industry certifications.
• A strong desire to learn about different security technologies and understand how security operations function.
• A passion for information security and a commitment to developing a career in this field.
• Reliability, accountability, and a strong work ethic.
• Well-developed logical and analytical thinking skills, with the ability to investigate and analyze security incidents.
• Ability to work in a shift-based schedule.
• Excellent written and verbal communication skills in English.
• Good understanding of TCP/IP network traffic and event log analysis.
• Good understanding of operating systems, network architecture, and common system design principles.
• Understanding of general cybersecurity threats, vulnerabilities, and exploits, along with appropriate mitigation techniques.
• Familiarity with and experience working within the region.
• Previous experience working for a Managed Security Services Provider (MSSP) or Managed Detection and Response (MDR) provider.
• Experience working in a continuous 24/7 operations environment.
• Familiarity and hands-on experience with multiple Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) solutions.
• One or more relevant industry certifications, such as GSEC, CySA+, CSA , or equivalent.