SOC Analyst T1
Description
- Monitor, triage, and investigate security alerts across endpoint, identity, email, network, cloud, and SaaS environments.
- Handle security incidents from initial detection through investigation, documentation, escalation, and resolution.
- Distinguish between true-positive, false-positive, and benign security activity.
- Recommend improvements to detections, investigation processes, runbooks, and security automations.
- Work closely with other internal teams during investigations.
- Maintain a professional and service-oriented approach when communicating with employees.
- Participate in the SOC shift rotation and support continuous security operations.
- Up to two years of experience as a SOC Analyst or in a similar cybersecurity role.
- Comfortable working in a dynamic environment and handling complex problems.
- Strong analytical thinking, curiosity, and problem-solving skills.
- Good understanding of IT infrastructure, operating systems, and networking fundamentals.
- Understanding of common cyber threats and attack techniques, including phishing, malware, ransomware, credential theft, and supply-chain attacks.
- Strong written and verbal English communication skills.
