Znajdź kolejną szansę zawodową

SOC Analyst L1 Position Description: We are looking for a dynamic and detail-oriented Command Center SOC L1 Engineer to join our 24x7 Security Operations team. You will be responsible for 24/7 monitoring, triage, and initial investigation of security alerts, escalating confirmed or complex incidents to higher tiers. You have to follow playbooks, document actions thoroughly, and help reduce risk by filtering false positives and prioritizing real threats for rapid response. Key Responsibilities: Continuous SIEM and security tool monitoring for alerts across endpoints, network, identity, email, and cloud. Triage and classification: validate alerts, determine severity/impact, and suppress false positives to combat alert fatigue. Initial investigation: collect context (logs, host/user activity, process/network details), enrich with basic threat intel/IOCs, and determine next steps. Escalation: hand off confirmed or high-risk incidents to Tier 2/IR with clear case notes and evidence. Documentation: maintain tickets, timelines, and shift handovers; contribute to tuning requests and playbook feedback. Tool hygiene: follow and execute standard operating procedures and common playbooks for frequent alert types Required Skills & Qualifications: 0 - 4 years of experience in a Security Operations Center (SOC) or Command Center environment. Understanding of Windows Server (L1 level) including AD, GPO, DNS, DHCP. Hands-on experience with network security tools and concepts (firewalls, proxies, IDS/IPS, VPNs). Proficiency with SIEM platforms (e.g., Splunk, QRadar, Seceon) and EDR solutions (CrowdStrike, MS-Defender). Familiarity with incident response frameworks (e.g., NIST, SANS). Ability to analyze logs, network traffic, and endpoint data to identify and respond to threats. Strong communication skills and ability to work in a high-pressure, fast-paced environment. Preferred Certifications: CompTIA Security CEH Microsoft Certified: Security Operations Analyst Associate ITIL Foundation. .