SOC Analyst L1 - Permanent

Why this role

SOC Analyst L1 provides first‑line monitoring and triage, ensuring timely response and high signal‑to‑noise.

Core responsibilities

• Monitor SIEM and XDR alerts, perform initial triage

• Escalate incidents with clear context and evidence

• Execute standard playbooks and containment steps

Technologies and domains

• SIEM, EDR/XDR, SOAR, ticketing

Potential SOPs to link

• Alert Triage Guide (L1)

• Escalation and Handover Checklist

Candidate profile

• 1–2 years SOC experience or equivalent internship

Typical sectors

• MSSPs and enterprise SOCs

• Finance and healthcare

• Government and public services

Top qualities

• Discipline in following playbooks

• Clear written handovers

• Willingness to learn and improve detections