Responsible for 24×7 security monitoring, initial alert triage, identification of suspicious activities, and timely escalation of potential security incidents to L2 analysts.
Responsibilities
Monitor security alerts and events across enterprise infrastructure using SIEM platforms.
Perform initial triage and validation of alerts to identify potential security threats.
Analyze security events from firewalls, IDS/IPS, EDR, antivirus, WAF, VPN, Active Directory, cloud, and network devices.
Perform initial triage and classification of incidents.
Escalate confirmed incidents to SOC L2 Analysts and/or Incident Response Team.
Entry-level Security Operations Center (SOC) Analyst responsible for continuous monitoring, triage, and documentation of security events, supporting 24x7 coverage and incident response.
Compensation
Salary Range: $65K-$70K (based on experience)
Responsibilities
Monitor SIEM, EDR, IDS/IPS, firewall, email security, and other security tool consoles in real time for events that may point to an incident
Perform initial triage of alerts using established playbooks and SOPs, and determine whether each is a false positive, benign activity, or a potential incident
Escalate validated or suspected incidents to Tier 2 analysts and incident response staff on time, with the supporting evidence attached
Create, update, and close tickets in the case management system, with clear and accurate documentation of actions taken
Review user-reported phishing emails and suspicious activity reports, and perform basic analysis of headers, URLs, and attachments
Requirements
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field
Nice to have: Hands-on experience with Microsoft Sentinel, SentinelOne, and Palo Alto XSOAR
Nice to have: Exposure to EDR tools such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or SentinelOne
Nice to have: Additional certifications such as CompTIA CySA+, CompTIA Network+, GIAC GSEC, or Splunk Core Certified User