SOC Tier 1

Position : SOC Tier 1 (L1) Engineer
Real Time 24x7 Monitoring & Response
Monitor SIEM alerts and dashboards in real time for potential security incidents.
Respond to incidents promptly via email, phone, or other communication channels based on predefined procedures.
Event Categorization & Triage
Categorize incoming alerts and events according to severity, providing initial triage to identify potential incidents.
Perform initial investigation to determine whether the alert is a true positive or false positive.
Escalation to Higher Tiers
Escalate unresolved or high severity incidents to Tier 2 or Tier 3 based on escalation policies.
Provide sufficient information and context for the escalation process.
Reporting & Documentation
Document all alerts, investigations, and escalations in the incident management system.
Provide initial daily/weekly/monthly security reports, outlining key metrics and incident trends.
Incident Response Procedures
Follow ...