Security Delivery SOC L1

Job description

Responsible for monitoring security events, triaging alerts, conducting initial investigations, responding to security incidents, and escalating advanced threats to senior SOC analysts. Key responsibilities: monitor and analyze security alerts from SOC monitoring tools; perform initial triage, investigation, and incident validation; execute containment actions for low-complexity incidents; escalate complex security events to L2/L3 teams; document incidents and maintain accurate case records.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related field
• fresh graduate to 3 years of experience in cybersecurity, preferably within a SOC environment
• basic understanding of cybersecurity concepts including networking, Windows/Linux operating systems, security threats, vulnerabilities and incident response fundamentals
• basic familiarity with SIEM solutions such as Splunk, Microsoft Sentinel or QRadar
• basic log analysis, alert triage, incident identification and investigation skills
• preferred certifications: Security+, SC-200, CEH or other entry-level cybersecurity certifications.

Skills