SOC Analyst (Tier 1)

About the role This is a Security Monitoring role performing 24x7 real-time monitoring of security events and alerts from SIEM, EDR, and other security platforms across assigned rotating shifts. Key responsibilities Perform 24x7 real-time monitoring of security events and alerts from SIEM, EDR, and other security platforms across assigned rotating shifts Conduct initial triage and validation of security alerts, filter out false positives, and classify incidents by severity according to established playbooks and procedures Escalate confirmed or suspicious incidents to Tier 2 analysts and relevant stakeholders within defined SLA, with complete supporting evidence and initial analysis Maintain accurate incident tickets, case notes, and shift handover reports to ensure continuity of monitoring coverage between shifts Provide feedback on recurring false positives, detection gaps, and playbook usability to support ongoing use case tuning About you Bachelor's Degree in Computer Engineering, Computer Science, Information Technology or related field 0-2 years of experience in cybersecurity, IT operations, or network operations; fresh graduates with relevant training are welcome Able and willing to work on a rotating 24x7 shift schedule, including nights, weekends, and public holidays Fundamental understanding of Network Protocols (TCP/IP, HTTP/S, DNS) and Operating Systems (Windows, Linux) Familiarity with common attack techniques and security concepts (malware, phishing, brute force, MITRE ATT&CK framework) Basic hands-on or academic exposure to SIEM, EDR, or log analysis tools Strong attention to detail and ability to maintain focus and accuracy during repetitive monitoring tasks Ability to remain calm and follow procedures under time pressure Good communication skills for clear incident reporting and effective shift handover Security certifications such as CompTIA Security+, CySA+, or vendor SIEM/EDR certifications are a plus