L1 SOC

Role Overview: The L1 SOC Engineer will serve as the first line of defense, monitoring alerts, triaging incidents, and escalating when necessary. This role will focus on basic alert handling and incident management, providing essential coverage for the 24/7 SOC. Key Responsibilities: - Monitor security alerts from the SIEM (Microsoft Sentinel) and other tools. - Perform initial triage and investigation of security alerts. - Escalate incidents to L2 engineers when necessary. - Document and report security incidents in the ticketing system. - Assist in the maintenance of SOC documentation and procedures. Qualifications: - 1-2 years of experience in cybersecurity or IT operations. - Knowledge of basic cybersecurity concepts and incident handling processes. - Familiarity with SIEM platforms, ideally Microsoft Sentinel. - Ability to work in shifts as part of a 24/7 operation.