Soc Analyst -L1

Role Summary:

We are seeking a Junior SOC Analyst to join STL Digitals Security Operations Centre team. The candidate requires to have hands-on experience monitoring, investigating and responding to security events using Microsoft Sentinel, MDE – XDR, Google Security Operations (Chronicle) SIEM or similar platforms. This role involves real-time security monitoring, initial incident triage, response, remediation of potential threats and escalation to senior analysts for further investigation.

Key Responsibilities:

• Monitor security alerts and events generated from Microsoft Sentinel and Google SecOps SIEM dashboards.
• Perform initial analysis and triage of security events to determine severity, scope, and potential impact.
• Escalate confirmed or high-severity incidents to Level 2/3 SOC analysts.
• Assist in tuning and improving SIEM detection rules, analytic use cases, and alerting thresholds.
• Knowledge and hands on experience on KQL for querying, analysing data, detecting, investigating threats and responding to incidents effectively.
• Support investigations by collecting and analysing logs, network data, and endpoint information.
• Document incidents, findings, and response actions in the SOC ticketing system.
• Collaborate with IT and security teams to ensure timely remediation of vulnerabilities and incidents.
• Participate in continuous training and stay current with emerging threats, attack techniques, and SOC tools.

Required Qualifications:

• 1–2 years of experience in a SOC, IT security, or cybersecurity monitoring role
• Basic understanding of network protocols, firewalls, IDS/IPS, and endpoint protection technologies.
• Hands-on experience with Microsoft Sentinel and/or Google Security Operations (Chronicle) /similar SIEM for alert monitoring or rule configuration.
• Familiarity with incident response processes and frameworks (NIST, MITRE ATT&CK).
• Strong analytical, problem-solving, and communication skills.
• Willingness to work in a shift-based or on-call rotation if required.

Preferred Qualifications:

• Certifications such as CompTIA Security+, Microsoft SC-200 (Security Operations Analyst Associate), Google Cybersecurity Certificate, or Splunk Core Certified User.
• Understanding of IT infrastructure, networking and related technologies.
• Understanding of cloud environments (Azure, Google Cloud Platform).