SOC Analyst

About This Role

Supporting the company's 24/7/365 Managed Detection Response operation, this Level 1 role is the first line of defense against cyber threats. It involves continuous monitoring, initial triage, and escalation of security alerts, making it suitable for an analyst with a foundational understanding of security operations.

Responsibilities

• Monitor security alerts, dashboards, and telemetry from SentinelOne, FortiSIEM, and UEBA in real time
• Perform initial triage and classification of incidents based on severity and potential impact
• Follow standard operating procedures for alert validation and escalate verified incidents to Level 2 Analysts
• Execute predefined containment actions (e.g., isolate endpoints, disable users, block IPs) via FortiSOAR playbooks
• Maintain incident documentation, ticketing, and SLA compliance using FortiSOAR's native ticketing system
• Generate and deliver daily and shift summary reports covering key detections and trends
• Support KnowBe4 phishing incident reporting workflows and initiate phishing alert escalations

Requirements

• 1-2 years of SOC or MDR operations experience
• Working knowledge of SentinelOne or similar EDR, SIEM dashboards, and SOAR tools
• Basic understanding of network and endpoint security fundamentals
• Strong attention to detail, communication, and shift-handoff discipline