SOC Analyst
Core
Tier 1 SOC Analyst handling initial triage, monitoring, and investigation of security alerts across cloud and endpoint environments. (via careerplan.io/jobs/76-008-14-27F-soc-analyst)
Role type
Tier 1 SOC Analyst
Builds
Security monitoring and incident triage for cloud and endpoint environments
Domain
Cybersecurity / Cloud Security
Required skills
SIEM platforms, EDR tools, log analysis, networking basics, Linux/Windows OS familiarity, incident escalation, English fluency
Preferred skills
Cloud environments (AWS/Azure/GCP), identity-based attack investigation, Python/Bash scripting
Technologies
Splunk, Microsoft Sentinel, QRadar, CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, CloudTrail, Azure Activity Logs
Responsibilities
Monitor security alerts from SIEM, EDR, and cloud platforms; Perform initial triage and classification of alerts; Investigate suspicious activities across endpoints, identities, and cloud environments; Escalate confirmed incidents to Tier 2 / Incident Response teams; Analyze logs from multiple sources; Document findings in tickets and investigation reports; Follow existing playbooks and contribute to improving detection logic; Communicate with internal teams and clients regarding alerts and findings
Seniority
Junior, hands-on IC