SOC L1 Analyst

Overview

SOC L1 Analyst

Key Responsibilities

• Monitor security alerts and events through SIEM and related security tools.
• Perform initial triage and analysis of security incidents.
• Review logs and identify suspicious activities.
• Support phishing email analysis and basic incident investigation.
• Escalate confirmed or suspicious incidents to L2/L3 SOC team members.
• Document incidents, findings, and actions taken.
• Follow SOC procedures, playbooks, and escalation processes.
• Stay updated on common cyber threats such as malware, phishing, brute-force attacks, and unauthorized access attempts

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 2-3 years of experience in SOC operations, cybersecurity monitoring, IT security, or related roles.
• Hands-on experience with:
• Security monitoring and alert analysis
• Log analysis
• Basic incident investigation
• Phishing email analysis
• SIEM tools
• Incident response procedures
• Good understanding of network protocols such as TCP/IP, DNS, HTTP, HTTPS, and SMTP.
• Good knowledge of Windows and Linux operating systems.
• Familiarity with cybersecurity concepts such as malware, phishing, brute-force attacks, vulnerabilities, and threat detection.
• Strong analytical and problem-solving skills.
• Good communication and documentation skills.
• Ability to work in shifts if required.

Preferred Certifications

• CompTIA Security+

• Cisco Certified CyberOps Associate

• OffSec Defense Analyst — OSDA
• eLearnSecurity Threat Hunting Professional — eTHP
• Any relevant SOC, SIEM, or cybersecurity certification