DIGITAL SECURITY - SOC Services

SOC Analyst L1 (Level 1) - Security Monitoring Analyst

Experience: 1-3 Years

Role Summary

The SOC L1 Analyst is the first line of defense responsible for continuous security monitoring, alert triage, incident identification, and initial response activities.

Key Responsibilities

• Monitor SIEM dashboards and security tools 24x7.
• Review and triage security alerts and events.
• Perform initial investigation of security incidents.
• Escalate incidents to L2/L3 teams based on severity.
• Monitor EDR, DLP, IDS/IPS, Email Security, Firewalls, and Proxy alerts.
• Execute predefined incident response procedures.
• Validate false positives and document findings.
• Create and maintain incident tickets.
• Generate daily and weekly security reports.
• Support compliance and audit activities.

Skills Required

SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight

EDR: CrowdStrike, Defender for Endpoint, SentinelOne

Basic Networking (TCP/IP, DNS, HTTP, HTTPS)

Windows/Linux fundamentals

Incident Management

MITRE ATT&CK fundamentals

Security monitoring concepts

Certifications Preferred

Security+

SC-200

CEH (Associate Level)