Job Description:
We are seeking a proactive and detail-oriented Tier 1 SOC Analyst to join our dynamic Security Operations Center (SOC) team. As a Tier 1 Analyst, you will play a crucial role in monitoring and analyzing security events, identifying potential threats, and responding to incidents in real-time. This is an excellent opportunity for someone looking to build a career in cybersecurity and gain hands-on experience in a fast-paced environment.
Key Responsibilities:
- Monitor security events and alerts from various security tools (SIEM, IDS/IPS, firewalls, etc.).
- Analyze and investigate security incidents to identify potential threats, vulnerabilities, and breaches.
- Triage and escalate security incidents to higher-tier analysts as necessary.
- Provide first-line response to security alerts, ensuring appropriate actions are taken to mitigate risks.
- Assist with incident response activities, including log analysis, threat hunting, and post-incident reporting.
- Maintain and update incident tickets and ensure all relevant information is documented.
- Collaborate with internal teams and other stakeholders to improve security posture and incident management processes.
- Assist with security awareness initiatives and participate in ongoing training to stay up to date with the latest cybersecurity trends and threats.
Qualifications:
- Basic understanding of cybersecurity principles, network protocols, and common attack vectors.
- Familiarity with SIEM tools (e.g., Splunk, QRadar, ArcSight) and security technologies (e.g., firewalls, IDS/IPS, anti-virus).
- Knowledge of IT infrastructure, including networks, servers, and operating systems.
- Strong analytical and problem-solving skills.
- Excellent communication skills, both written and verbal.
- Ability to work in a fast-paced, high-pressure environment while managing multiple priorities.
- Attention to detail and a strong desire to learn.
- Relevant certifications (e.g., CompTIA Security+, Sans Sec 503,Sans Sec 511, Sans Sec 555, or equivalent) are a plus but not required.
Preferred Skills:
- Previous experience in a SOC or cybersecurity-related role.
- Experience with threat intelligence platforms and vulnerability management tools.
- Understanding of incident response methodologies and procedures.