SOC Analyst (L1/L2) – Cybersecurity Monitoring & Response

About the role

The SOC Analyst (L1/L2) monitors, detects, analyses and responds to cybersecurity threats across enterprise environments, supporting 24x7 SOC operations.

Key responsibilities

• Monitor and analyse security alerts from SIEM, SOAR, EDR and other tools to identify potential threats.
• Perform timely triage, validation and investigation of alerts according to SLA and prioritisation matrix.
• Execute containment, response and remediation actions using defined SOC runbooks.
• Manage incidents through the full case lifecycle, ensuring accurate documentation and closure.
• Escalate high‑severity or complex incidents in line with SLAs and coordinate with stakeholders.
• Perform shift‑based operations, including handover of active cases with complete context.
• Identify and report operational issues or anomalies within the shift.
• Support continuous improvement by identifying gaps in detection, logging, automation and case handling processes.

Required profile

• Bachelor’s degree in Computer Science, Information Security, IT or related field.
• 1–3 years of experience in Security Operations, IT security or a related role.
• Strong analytical and problem‑solving skills with attention to detail.
• Good written and verbal communication skills for documentation and handover reporting.

Required skills

• Working knowledge of Windows and Linux/Unix operating systems.
• Understanding of networking concepts (TCP/IP, OSI model, DNS, HTTP/S).
• Familiarity with SIEM, SOAR, EDR and other security monitoring tools.
• Exposure to cloud security concepts (Azure, AWS, GCP) – advantage.
• Knowledge of MITRE ATT&CK framework – advantage.
• Basic understanding of cybersecurity fundamentals, threat types and attack vectors.