SOC Analyst L1

SOC Analyst - Junior (L1)

Experience: 0-2 years | Department: Infosec

Roles and Responsibilities:

Perform real-time monitoring of security events from multiple log sources.

Daily tracking of events, alerts, and requests.

Perform first-level triage of alerts and escalate confirmed incidents to L2 with proper evidence.

Monitor SIEM components and analyze logs to ensure relevant security information is

gathered.

Use the SIEM tool to document security incidents and responses daily.

Detect suspicious logs and create reports and charts for easy understanding.

Perform first-level phishing email analysis (headers, URLs, attachments).

Investigate basic alerts triggered by endpoints, email gateway, and antivirus.

Handle queries and requests through calls and emails.

Track vulnerability and patch status and follow up on closure.

Assist in conducting security awareness training.

Follow SOPs, playbooks, and shift handover procedures.

Work as part of a team to ensure corporate data and technology platform components are

safeguarded from known threats.

Preferred Qualifications:

0-2 years of experience with a Bachelor's degree in Computer Science, or a related technical

domain from reputed organizations.

Should have exposure to SIEM tools like QRadar, LogRhythm, sentinelone, Log360 and

endpoint security like EDR, XDR (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint).

Should have worked on SIEM tools like QRadar, LogRhythm, sentinelone and endpoint security

like EDR, XDR (CrowdStrike, SentinelOne).

Should have basic knowledge of any DLP solution from any vendor.

Good written and verbal communication, and willingness to work in shifts.

Certifications such as CompTIA Security+ or CEH are an added advantage.