Monitor, triage, and respond to security alerts, events, and incidents following defined SOC procedures and playbooks
Perform initial investigations to determine alert validity, scope, and potential impact
Accurately document investigations, actions taken, and outcomes in the ticketing system
Independently handle routine and low-to-moderate severity alerts and escalate higher-risk incidents as required
Identify patterns, recurring alerts, or anomalies and document findings for review by senior analysts
Communicate investigation findings clearly and professionally with internal teams and customers
Assist in identifying potential security gaps or misconfigurations and escalate observations appropriately
Support the monitoring and day-to-day operation of security tools and platforms
Follow all information security, privacy, and data protection policies when handling client data
Contribute to the maintenance and improvement of SOC documentation, procedures, and playbooks
Stay informed on common attack techniques, emerging threats, and relevant vulnerabilities
Maintain focus and accuracy while working in a fast-paced, alert-driven environment

Exposure to a SOC, NOC, IT support, or similar technical operations environment.
Familiarity with security monitoring concepts, incident response workflows, or alert handling
Experience working with ticketing systems or case management tools
Academic, internship, lab, or entry-level professional experience in cybersecurity, IT, or related fields is acceptable

SOC Analyst I

Key skills