Soc Analyst L1

Description

Kidan is seeking a dedicated Soc Analyst L1 to join our cybersecurity team. This role focuses on monitoring and analyzing security events using SIEM tools, conducting thorough investigations, and identifying potential threats to protect our information assets. The candidate will engage deeply with security alert triage, incident response, and vulnerability management to safeguard our networks, endpoints, and identity systems. This position requires proficiency in security tools such as Splunk, Microsoft Sentinel, and CrowdStrike, and demands a keen eye for detail in correlating data from multiple sources to understand attack vectors and mitigate risks effectively. As a Soc Analyst L1, you will contribute to proactive threat hunting and perform detailed security investigations, working closely with various telemetry data and network activity patterns. You are expected to maintain excellence in handling security incident escalations and supporting vulnerability remediation efforts. This role does not require team management but offers a critical frontline position in our security operations center. The ideal candidate holds a degree in Cybersecurity, Information Security, or related fields and possesses at least two years of relevant experience in SIEM monitoring, incident handling, and security event analysis.

Responsibilities

• Monitor security alerts continuously and perform alert triage to determine the severity and necessary actions, including escalation to appropriate teams.
• Investigate security incidents deeply by correlating logs and telemetry from multiple security tools to validate threats and identify root causes.
• Perform log analysis across various platforms and devices to detect anomalous or suspicious activities.
• Manage Endpoint Detection and Response (EDR) tools like CrowdStrike Falcon to identify and respond to endpoint-related threats.
• Analyze phishing attempts and evaluate the impact of suspected email attacks.
• Review and monitor identity and access security, including privileged account activities and cloud identity environments such as Microsoft Entra ID.
• Support vulnerability management by assessing identified vulnerabilities, prioritizing remediation efforts, and verifying mitigation effectiveness.
• Assist in proactive threat hunting to uncover potential threats using threat intelligence and network traffic analysis.
• Understand network communications, protocols, and segmentation to detect abnormal traffic patterns underlying possible security incidents.
• Develop awareness of offensive security techniques, including penetration testing methodologies and common attacker behaviors to better fortify defenses.
• Follow established security incident escalation workflows to ensure timely response and documentation.
• Collaborate with internal teams to improve security detection rules and ensure continuous improvement of monitoring capabilities.
• Maintain up-to-date knowledge of emerging cybersecurity threats, tools, and best practices to enhance SOC capabilities.

Experience

2 Years

Apply By

Dec 4, 2026

Required Skills

• SIEM Monitoring
• Security Alert Triage
• Incident Response
• Log Analysis
• Endpoint Detection and Response (EDR)
• Phishing Analysis
• Splunk or Microsoft Sentinel
• Crowstrike
• Security Incident Escalation Workflow
• CrowdStrike Falcon Alert Triage
• Threat Hunting
• Vulnerability Management
• Networking
• Identity Security

Nice to Have Skills

• Microsoft Entra ID
• Offensive Security Concepts