Security Analyst – SOC Level 1

Monitor security alerts and logs across various platforms, including SIEM systems, firewalls, endpoint protection tools, and network devices.

Analyse potential threats, intrusions, and anomalous activity to determine risk levels.

Triage and escalate incidents according to established incident response procedures.

Perform basic investigation and containment actions for low-complexity incidents.

Stay updated on emerging threats, vulnerabilities, and attack methods to enhance detection capabilities.

Leverage threat intelligence feeds to improve monitoring and detection rules.

Create detailed incident reports, including root cause analysis and mitigation steps.

Maintain accurate and up-to-date records of all activities and investigations.

Collaborate with Tier 2/3 analysts, engineers, and other IT teams for incident resolution.

Escalate complex incidents to senior analysts with detailed documentation.

Perform regular health checks on security tools and systems.

Participate in routine SOC activities, such as compliance checks and security awareness exercises.