DIGITAL SECURITY - SOC Services

SOC Analyst L1 (Level 1) - Security Monitoring Analyst

Experience: 1-3 Years

Role Summary

The SOC L1 Analyst is the first line of defense responsible for continuous security monitoring, alert triage, incident identification, and initial response activities.

Key Responsibilities

• Monitor SIEM dashboards and security tools 24x7.
• Review and triage security alerts and events.
• Perform initial investigation of security incidents.
• Escalate incidents to L2/L3 teams based on severity.
• Monitor EDR, DLP, IDS/IPS, Email Security, Firewalls, and Proxy alerts.
• Execute predefined incident response procedures.
• Validate false positives and document findings.
• Create and maintain incident tickets.
• Generate daily and weekly security reports.
• Support compliance and audit activities.

Skills Required

• SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight
• EDR: CrowdStrike, Defender for Endpoint, SentinelOne
• Basic Networking (TCP/IP, DNS, HTTP, HTTPS)
• Windows/Linux fundamentals
• Incident Management
• MITRE ATT&CK fundamentals
• Security monitoring concepts

Certifications Preferred

• Security+
• SC-200
• CEH (Associate Level)