L1 SOC Security Analyst (SIEM / SOAR / UEBA) 1 to 2 Years
Summary
Monitor and triage security alerts 24/7 using SIEM, SOAR, and UEBA tools, escalating incidents to senior teams while maintaining incident records and operational reports.
- Monitor SIEM, SOAR, and UEBA platforms on a 24×7 basis for security events and alerts.
- Perform initial triage, validate security incidents, and classify alerts based on SOPs.
- Monitor log collection, platform health, automation workflows, and data ingestion status.
- Create and update incident tickets, maintain investigation records, and prepare operational reports.
- Escalate confirmed security incidents, failed automation workflows, and anomalous user activities to the L2 team.
- Coordinate with IT and security teams during incident response and service restoration.
- Verify the successful execution of automated playbooks and security workflows.
- Adhere to SOC processes, SLAs, escalation matrix, and documentation standards.