SOC L1 Cyber Security Analyst

About the role

The SOC L1 Cyber Security Analyst is the first line of defense in a 24/7 Security Operations Center. You will monitor security alerts in real time, triage incidents, and initiate containment actions to protect client infrastructures.

Key responsibilities

• Continuously monitor alerts from SIEM, EDR, IDS/IPS and other security tools.
• Analyze and triage alerts, distinguishing false positives from genuine threats.
• Act as the first responder, executing initial containment and preserving forensic data.
• Document incidents accurately and escalate complex cases to Level 2 analysts.
• Monitor health of security devices (firewalls, SIEM, EDR agents) and perform basic troubleshooting.
• Assist in tuning monitoring rules and support DDoS protection operations, including updates, patching and health checks.
• Work on a rotating 24/7 shift schedule and ensure smooth handovers between shifts.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, IT or related field, or equivalent experience.
• 1–3 years of experience in security monitoring, incident response or managed security services.

Required skills

• Experience with SIEM platforms.
• Knowledge of Endpoint Detection and Response (EDR) solutions.
• Familiarity with IDS/IPS technologies.
• Understanding of firewall configuration and operation.
• Basic DDoS protection concepts and device health monitoring.
• Log analysis and forensic data collection.