SOC Analyst Level 1 – 24/7 Security Operations Center

About the role

As a Security Operations Center (SOC) Analyst Level 1 you will be the first line of defence in a 24/7 SOC, monitoring alerts, performing initial triage and helping protect customer environments from cyber threats. The position is ideal for early‑career professionals seeking hands‑on experience in a fast‑paced MSSP setting.

Key responsibilities

• Monitor security alerts across SIEM, EDR, firewalls, IDS/IPS and endpoint platforms.
• Perform initial triage to distinguish false positives from actionable incidents.
• Analyse logs, events and indicators of compromise (IOCs).
• Follow SOC runbooks and SOPs for alert handling and escalation.
• Create and update incident tickets with accurate details and timelines.
• Escalate validated incidents to SOC Level 2 analysts.
• Conduct basic threat‑intelligence lookups (IP, URL, hash reputation).
• Support shift handovers and ensure operational continuity.
• Meet SOC KPIs such as time‑to‑triage, time‑to‑queue and SLA adherence.

Required profile

• Basic understanding of common cyber threats (malware, phishing, DDoS, brute‑force).
• Working knowledge of Windows and Linux operating systems.
• Familiarity with networking fundamentals (TCP/IP, DNS, HTTP/S).
• Willingness to work rotating shifts, including weekends and holidays.

Required skills

• SIEM platforms (e.g., Microsoft Sentinel).
• Endpoint Detection & Response (EDR) tools.
• Firewalls and IDS/IPS technologies.
• Log analysis and IOC investigation.
• Threat‑intelligence lookup tools for IP, URL and hash reputation.