SOC L1 ENGINEER

Job Title:

Location:

Experience

Position Summary

Level 1 SOC Analyst

5G Security Operations Center (SOC)

initial monitoring, triaging, and escalation of security events

4G/5G protocols, cybersecurity, and network operations

Key Responsibilities

• Act as the first line of defense by monitoring and responding to cybersecurity incidents in real time.
• Continuously monitor SOC dashboards, SIEM/SOAR tools, and 5G-specific alerting systems.
• Analyze and triage security alerts to identify legitimate threats and potential incidents.
• Document and maintain detailed incident logs, investigation notes, and escalation records.
• Identify patterns and trends in recurring events to support threat intelligence analysis.
• Apply knowledge of 4G/5G RAN and Core protocols to detect and understand network-level anomalies.
• Escalate complex or confirmed incidents to L2 SOC Analysts for deeper investigation.
• Support incident response activities under supervision and follow established playbooks.
• Ensure compliance with organizational and regulatory security policies.
• Stay updated on emerging threats, vulnerabilities, and attack vectors relevant to 5G and telecom systems.
  

Experience

Experience :

• 1–3 years of experience in SOC operations or cybersecurity monitoring.
• Hands-on exposure to 4G/5G Security Operations or working with ISPs on telecom technologies preferred.
• Experience using SIEM/SOAR platforms such as Splunk and Microsoft Sentinel.
• Exposure to both IT and OT security environments is an advantage.
• Technical Skills:
• Basic understanding of TCP/IP, OSI Model, and network fundamentals.
• Familiarity with cybersecurity principles, incident triage, and threat detection.
• Knowledge of 5G architecture and related security risks.
• Strong analytical and problem-solving skills with attention to detail.
• Effective communication and documentation skills.
• Willingness to work in rotational shifts (24/7 coverage).
• Certifications (Preferred):
• CompTIA Security+, Certified SOC Analyst (CSA), CCNA CyberOps, or CompTIA CySA+.