Soc Analyst 1

Responsibilities

• Monitor SIEM alerts for potential security incidents and requests for information, including (but not limited to) real-time channels, tools, dashboards, periodic reports, chat sessions, and tickets.
• Follow incident-specific procedures to perform basic triage of potential security incidentsdetermining their nature and priority, eliminating obvious false positives, and processing requests for information.
• Escalate potential security incidents to senior analysts and implement countermeasures and mitigating controls.
• Monitor and analyze Security Information and Event Management (SIEM) data to identify security issues for remediation.
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through thorough review and analysis of relevant event detail and summary information.
• Document all actions taken in the ticketing system and SIEM.
• Prepare periodic reports for clients.
• Work on rotating shifts (three shifts), as we provide 24/7 security services.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field
• Genuine interest in cybersecurity and a willingness to learn
• Understanding of networking fundamentals (TCP/IP, DNS, HTTP, common ports and protocols)
• Familiarity with operating system fundamentals across Windows and Linux/Unix
• Strong analytical skills, attention to detail, and the ability to stay composed under pressure
• Good communication skills in English

Preferred Qualifications

• Hands-on cybersecurity experience (internships, labs, or personal projects)
• Exposure to SIEM tools (e.g., Splunk, QRadar)
• Familiarity with cloud services such as AWS and Azure
• Scripting experience with Python, Bash, or PowerShell
• Cybersecurity certifications (e.g., CompTIA Security+, CEH)