Security Delivery SOC L1

Role Summary Responsible for monitoring security events, triaging alerts, conducting initial investigations, responding to security incidents, and escalating advanced threats to senior SOC analysts. Key Responsibilities Monitor and analyze security alerts from SOC monitoring tools. Perform initial triage, investigation, and incident validation. Execute containment actions for low-complexity incidents. Escalate complex security events to L2/L3 teams. Document incidents and maintain accurate case records. Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or any other related field. Experience: Fresh graduates to 3 years of experience in cybersecurity, preferably within a SOC environment. Technical Knowledge: Basic understanding of cybersecurity concepts, including networking, operating systems (Windows/Linux), security threats, vulnerabilities, and incident response fundamentals. Security Tools: Basic familiarity with SIEM solutions (e.g., Splunk, Microsoft Sentinel, QRadar) and security monitoring tools is preferred. Core Skills: Basic log analysis, alert triage, incident identification, and investigation capabilities. Certifications (Preferred): Security+, SC-200, CEH, or other entry-level cybersecurity certifications.

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or any other related field. Fresh graduates to 3 years of experience in cybersecurity, preferably within a SOC environment. Basic understanding of cybersecurity concepts, including networking, operating systems (Windows/Linux), security threats, vulnerabilities, and incident response fundamentals. Basic familiarity with SIEM solutions (e.g., Splunk, Microsoft Sentinel, QRadar) and security monitoring tools is preferred. Certifications (Preferred): Security+, SC-200, CEH, or other entry-level cybersecurity certifications.

Monitor and analyze security alerts from SOC monitoring tools. Perform initial triage, investigation, and incident validation. Execute containment actions for low-complexity incidents. Escalate complex security events to L2/L3 teams. Document incidents and maintain accurate case records.