SOC Analyst L1 (Level 1) - Security Monitoring Analyst

Experience: 1-3 Years

Role Summary The SOC L1 Analyst is the first line of defense responsible for continuous security monitoring, alert triage, incident identification, and initial response activities.

Key Responsibilities

- Monitor SIEM dashboards and security tools 24x7.
- Review and triage security alerts and events.
- Perform initial investigation of security incidents.
- Escalate incidents to L2/L3 teams based on severity.
- Monitor EDR, DLP, IDS/IPS, Email Security, Firewalls, and Proxy alerts.
- Execute predefined incident response procedures.
- Validate false positives and document findings.
- Create and maintain incident tickets.
- Generate daily and weekly security reports.
- Support compliance and audit activities.

Skills Required

- SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight
- EDR: CrowdStrike, Defender for Endpoint, SentinelOne
- Basic Networking (TCP/IP, DNS, HTTP, HTTPS)
- Windows/Linux fundamentals
- Incident Management
- MITRE ATT&CK; fundamentals
- Security monitoring concepts

Certifications Preferred

- Security+
- SC-200
- CEH (Associate Level)

📌 DIGITAL SECURITY - SOC Services (Pune)
🏢 Zensar
📍 Pune