Cyber Security SOC Executive

About the role

A Level 1 SOC (Security Operations Centre) analyst is the entry-level role in a SOC, focusing on initial monitoring, triage, and investigation of security alerts. They are responsible for quickly assessing and determining the legitimacy of alerts, filtering out false positives, and escalating genuine incidents to higher tiers for deeper analysis. Level 1 analysts also document incident details and follow established procedures.

Key responsibilities

• Monitor security event and incident alerts using various security tools and technologies, example SIEM, MDR and others

• Analyse and investigate alerts to determine the nature and scope of the security event or incident

• Adhere to predefined procedures and playbooks for responding to common security events

• Document and report security incidents to the appropriate teams and stakeholders

• Work with other security analysts and stakeholders to triage security incidents and determine the appropriate course of action

• Respond to security incidents according to established procedures and guidelines

• Conduct initial investigations and perform data collection and analysis to determine the extent of a security incident

• Provide support and guidance to end-users during security incidents

• Create and maintain incident reports and other documentation related to security events and incidents

• Assist in developing and improving SOC procedures and policies

Qualification

• Diploma or bachelor's degree in computer science, Cybersecurity, or a related field

• 1 year of experience in a security operations role

• Relevant security certifications (e.g., CompTIA Security+, or any cyber security certificate)

• Experience using security technologies such as SIEM (Security Information and Event Management), IDS (Intrusion Detection System), and firewalls

• Operating System knowledge, such as Microsoft Windows and Linux