SOC Analyst - Tier 1

The SOC Analyst - Tier 1 is responsible for providing 24x7 security monitoring, alert triage, event analysis, and incident escalation services within the company's Managed Security Operations Center (SOC). As the first line of defense against cybersecurity threats, the role continuously monitors customer environments, validates security events, and ensures potential security incidents are identified, classified, documented, and escalated in accordance with established procedures and service level agreements.

Responsibilities

• Provide continuous 24x7 monitoring of customer and enterprise security environments through shift-based operations.
• Monitor and analyze security events generated from SIEM platforms, IDS/IPS solutions, Endpoint Detection & Response (EDR) tools, Firewalls, Email security gateways, Web security solutions, and Cloud security platforms.
• Review and assess security alerts to determine whether activity represents a legitimate security threat or a false positive.
• Perform initial event validation, classification, and prioritization based on severity, risk, and potential business impact.
• Identify suspicious behavior, indicators of compromise (IOCs), and anomalous activities requiring further investigation.
• Perform first-level analysis and triage of security alerts and events.
• Create and manage incident tickets within approved incident management platforms.
• Categorize incidents based on Severity, Impact, Urgency, and Threat classification.
• Escalate validated incidents to SOC Analyst - Tier 2 teams in accordance with approved escalation procedures.
• Maintain incident tracking and ensure timely updates throughout the incident lifecycle.
• Utilize SIEM platforms to monitor security events, review alerts, execute predefined searches and queries, and support basic investigations.
• Maintain accurate records of investigations, observations, and escalation activities.
• Document security incidents and monitoring activities in accordance with operational procedures.
• Follow approved SOC procedures, playbooks, and operational standards.

Requirements

• Minimum 1 year of SOC operations experience.
• Familiarity with SIEM consoles, alert triage, and SOC monitoring workflow; willingness to work rotating shifts.
• Foundational networking and operating-system knowledge is preferable.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field.
• Security +, CEH, or any relevant certification preferred.

Location
Kuwait City, Kuwait