SOC Analyst
Monitor security alerts, investigate incidents, enrich events and support escalation across managed security environments.
Job Description +
Role overview
Monitor, investigate and triage security alerts across managed security environments, supporting timely escalation and incident response.
- Monitor SIEM and security alerts and identify suspicious activity.
- Investigate authentication, endpoint, network and malware-related events.
- Perform alert enrichment using threat intelligence and security tools.
- Document investigations, escalate confirmed incidents and maintain case notes.
- Support tuning of detection rules, dashboards and recurring SOC reports.
- 0–2 years of SOC, SIEM or cybersecurity experience.
- Understanding of Windows and Linux logs, networking and common attack techniques.
- Hands-on exposure to SIEM platforms such as Wazuh, Microsoft Sentinel or Splunk is useful.
- Good analytical, documentation and communication skills.