SOC Tier 1 Security Analyst

About the Role

We are looking for motivated and technically skilled SOC Tier 1 Security Analysts  to join our internal Security Operations Centre (SOC) within a global enterprise organisation.

This is an opportunity to be part of a growing in-house cybersecurity operation, responsible for monitoring, detecting, investigating and responding to security threats across a complex international IT environment.

The successful candidates will work with modern security technologies and collaborate closely with cybersecurity and IT teams.

Key Responsibilities

- Monitor and triage security alerts, events and incidents across enterprise environments.
- Perform initial investigations using SIEM, EDR/XDR and Microsoft security technologies.
- Identify potential threats, suspicious activities, indicators of compromise (IOCs) and abnormal behaviour.
- Execute established incident response playbooks and escalation procedures.
- Investigate phishing attempts, suspicious logins, malware alerts and endpoint threats.
- Maintain accurate incident documentation, investigation timelines and handover records.
- Support threat hunting, detection improvement and security automation initiatives.
- Work closely with internal cybersecurity, infrastructure and IT teams.
- Participate in 24/7 rotational shifts, including nights and weekends.

Required Qualifications

- 1–3 years of experience in a SOC, cybersecurity operations or security monitoring role.
- Understanding of cybersecurity threats, attack techniques and incident response processes.
- Hands-on experience with SIEM and endpoint security solutions.
- Good knowledge of Windows, networking, DNS, authentication protocols and Microsoft 365 environments.
- Ability to investigate security incidents and distinguish genuine threats from false positives.
- Strong analytical skills, attention to detail and communication abilities.
- Good written and spoken English.
- Willingness to work in a 24/7 shift environment.

Advantageous Skills

- Experience with Microsoft Sentinel, Microsoft Defender XDR and Entra ID.
- Familiarity with KQL, MITRE ATT&CK and threat intelligence.
- Experience with SOAR or security automation.
- Relevant certifications such as Security+, SC-200, CySA+ or equivalent.
- Basic scripting skills using PowerShell or Python.

What We Offer

- An opportunity to contribute to the development of an in-house SOC within a global enterprise.
- Exposure to diverse cybersecurity technologies and international business environments.
- Professional training and career development opportunities.
- A collaborative cybersecurity team with opportunities to grow professionally.
- Competitive salary and benefits package.