SOC Tier 1 Security Analyst

We are looking for motivated and technically skilled SOC Tier 1 Security Analysts to join our internal Security Operations Centre (SOC) within a global enterprise organisation. This is an opportunity to be part of a growing in-house cybersecurity operation, responsible for monitoring, detecting, investigating and responding to security threats across a complex international IT environment. The successful candidates will work with modern security technologies and collaborate closely with cybersecurity and IT teams.

Key Responsibilities

• Monitor and triage security alerts, events and incidents across enterprise environments.
• Perform initial investigations using SIEM, EDR/XDR and Microsoft security technologies.
• Identify potential threats, suspicious activities, indicators of compromise (IOCs) and abnormal behaviour.
• Execute established incident response playbooks and escalation procedures.
• Investigate phishing attempts, suspicious logins, malware alerts and endpoint threats.
• Maintain accurate incident documentation, investigation timelines and handover records.
• Support threat hunting, detection improvement and security automation initiatives.
• Work closely with internal cybersecurity, infrastructure and IT teams.
• Participate in 24/7 rotational shifts, including nights and weekends.

Required Qualifications

• 1-3 years of experience in a SOC, cybersecurity operations or security monitoring role.
• Understanding of cybersecurity threats, attack techniques and incident response processes.
• Hands-on experience with SIEM and endpoint security solutions.
• Good knowledge of Windows, networking, DNS, authentication protocols and Microsoft 365 environments.
• Ability to investigate security incidents and distinguish genuine threats from false positives.
• Strong analytical skills, attention to detail and communication abilities.
• Good written and spoken English.
• Willingness to work in a 24/7 shift environment.

Advantageous Skills

• Experience with Microsoft Sentinel, Microsoft Defender XDR and Entra ID.
• Familiarity with KQL, MITRE ATT&CK and threat intelligence.
• Experience with SOAR or security automation.
• Relevant certifications such as Security+, SC-200, CySA+ or equivalent.
• Basic scripting skills using PowerShell or Python.

What We Offer

• An opportunity to contribute to the development of an in-house SOC within a global enterprise.
• Exposure to diverse cybersecurity technologies and international business environments.
• Professional training and career development opportunities.
• A collaborative cybersecurity team with opportunities to grow professionally.
• Competitive salary and benefits package.