SOC Analyst Level 1

Role Summary

The SOC Analyst will support NetOne IT’s cybersecurity operations by continuously monitoring, triaging and investigating security events across internal and customer environments. The role will be responsible for identifying and validating potential threats, supporting incident response and escalation, conducting threat intelligence and vulnerability management activities, maintaining accurate security records, and contributing to the improvement of security monitoring and response processes.

Key Responsibilities

• Monitor SIEM/XDR, MSSP, endpoint security and other security platforms for threats, alerts and suspicious activity.
  
• Triage, classify, investigate and escalate security alerts and confirmed or suspected incidents.
  
• Analyse logs, indicators of compromise and other evidence to determine the scope, impact and likely root cause of incidents.
  
• Support incident containment, eradication and recovery in line with approved procedures.
  
• Conduct threat intelligence research and support threat hunting activities.
  
• Support vulnerability assessments, prioritisation, remediation tracking and retesting.
  
• Assist with improving security monitoring rules, dashboards, use cases and alert thresholds.
  
• Maintain accurate incident records, investigation notes, evidence and handovers.
  
• Prepare daily, weekly and monthly SOC reports covering incidents, vulnerabilities, trends and SLA performance.
  
• Collaborate with systems, network, cloud, service desk and customer teams to resolve security issues and strengthen security controls.
  

Requirements

Minimum Requirements

• Bachelor's degree or diploma in Cybersecurity, IT, Computer Science, Information Systems or a related field.
  
• At least2 years' relevant experiencein SOC operations, cyber defence, security monitoring, incident response, network security or systems security.
  
• Hands-on experience with SIEM/XDR, endpoint security, firewall, server, identity and network-security platforms.
  
• Good understanding of TCP/IP, DNS, HTTP/S, email, VPNs, authentication and common cyberattack techniques.
  
• Strong analytical, communication and problem-solving skills.