SOC Analyst (Tier 1)

About the role

This is a Security Monitoring role performing 24x7 real-time monitoring of security events and alerts from SIEM, EDR, and other security platforms across assigned rotating shifts.

Key responsibilities

• Perform 24x7 real-time monitoring of security events and alerts from SIEM, EDR, and other security platforms across assigned rotating shifts
• Conduct initial triage and validation of security alerts, filter out false positives, and classify incidents by severity according to established playbooks and procedures
• Escalate confirmed or suspicious incidents to Tier 2 analysts and relevant stakeholders within defined SLA, with complete supporting evidence and initial analysis
• Maintain accurate incident tickets, case notes, and shift handover reports to ensure continuity of monitoring coverage between shifts
• Provide feedback on recurring false positives, detection gaps, and playbook usability to support ongoing use case tuning

About you

• Bachelor's Degree in Computer Engineering, Computer Science, Information Technology or related field
• 0-2 years of experience in cybersecurity, IT operations, or network operations; fresh graduates with relevant training are welcome
• Able and willing to work on a rotating 24x7 shift schedule, including nights, weekends, and public holidays
• Fundamental understanding of Network Protocols (TCP/IP, HTTP/S, DNS) and Operating Systems (Windows, Linux)
• Familiarity with common attack techniques and security concepts (malware, phishing, brute force, MITRE ATT&CK framework)
• Basic hands-on or academic exposure to SIEM, EDR, or log analysis tools
• Strong attention to detail and ability to maintain focus and accuracy during repetitive monitoring tasks
• Ability to remain calm and follow procedures under time pressure
• Good communication skills for clear incident reporting and effective shift handover
• Security certifications such as CompTIA Security+, CySA+, or vendor SIEM/EDR certifications are a plus