Soc Analyst L1

Description:

Key Responsibilities:

• Monitor and analyze security events from various sources including SIEM, firewalls, IDS/IPS, EDR, and network traffic.
• Perform in-depth root cause analysis and recommend remediation strategies.
• Coordinate and support containment, eradication, and recovery efforts during security incidents.
• Lead threat hunting activities and proactive identification of potential threats.
• Document incident findings and contribute to improving playbooks and response processes.
• Work closely with threat intelligence and engineering teams to fine-tune detection rules and improve coverage.
• Ensure all incidents are logged, tracked, and resolved in accordance with SLAs.

Requirements:

• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience).
• Minimum of 3 years of experience in a Security Operations Center (SOC).
• Strong knowledge of attack vectors, threat landscapes, and malware behavior.
• Proficient with tools such as SIEM (e.g., Splunk, QRadar, Sentinel), EDR (e.g., CrowdStrike, SentinelOne), IDS/IPS, and firewalls.
• Hands-on experience with incident response, investigation, and remediation.
• Familiarity with MITRE ATT&CK framework, kill chain model, and threat hunting techniques.
• Relevant certifications preferred: GCIA, GCIH, CEH, CySA+, or equivalent.
• Strong analytical, communication, and documentation skills.