SOC Analyst L1

Monitor and analyze alerts coming from EDR, SIEM platforms, and other corporate tools.

Conduct initial triage of security events, assessing severity, credibility, and urgency, and filtering out false positives.

Escalate incidents to Level 2 analysts or incident response teams as needed.

Document findings, actions taken, and outcomes within a ticketing system.

Follow established standard operating procedures (SOPs) and playbooks for alert handling.

Contribute to the ongoing tuning of EDR/SIEM rules to minimize false positives.

Stay up to date with emerging threats and industry best practices.

Take part in active learning and Purple Teaming exercises within the SOC team.

Work a night shift schedule (01:00–10:00 CET).

6–12 months of experience in a SOC or related security role.

Familiarity with core cybersecurity frameworks such as MITRE ATT&CK, NIST, and CIS.

Working knowledge of EDR/XDR and SIEM platforms (e.g., SentinelOne, Splunk, QRadar).

Strong analytical and problem-solving abilities.

Comfort working in a fast-paced, team-oriented environment.

Good written and verbal English communication skills (B1+).

Willingness to work shift-based hours, including nights and weekends, with shifts distributed evenly across the department.