Blue Team Analyst N1
Core
Monitoring security events, analyzing alerts, and executing basic incident response actions in a SOC environment.
Role type
Junior SOC Analyst (Blue Team N1)
Builds
Security incident response playbooks and detection rules
Domain
Cybersecurity / SOC Operations
Deliverable
client delivery
Required skills
SIEM monitoring, incident triage, basic incident response, Windows security, Azure familiarity, evidence collection, playbook execution
Preferred skills
BTL1 certification, FortiSIEM expertise, CompTIA CySA+ certification
Technologies
FortiSIEM, Microsoft Azure, Windows
Responsibilities
Continuous monitoring of security events and alerts, Initial analysis and prioritization of security incidents, Execution of basic incident response playbooks, Timely escalation of incidents to higher-level teams, Contribution to detection rule improvement, Maintaining auditable activity records
Seniority
Junior, hands-on IC