Monitor SIEM, EDR, and cloud alerts; perform initial triage and log analysis; investigate endpoint, identity, and cloud activity; escalate incidents with context; document findings and follow playbooks; communicate with clients and internal teams.
Description
We’re looking for a Tier 1 SOC Analyst to join our team and handle initial triage, monitoring, and investigation of security alerts across cloud and endpoint environments.
This is a client-facing role requiring strong English, excellent verbal communication skills, and the ability to clearly communicate findings and escalations. The position is intended for candidates with at least 1 year of hands-on SOC / Security Operations experience.
The role is based on morning shifts aligned with US working hours, 08:00–17:00 US time.
Responsibilities
- Monitor security alerts from SIEM, EDR, and cloud platforms
- Perform initial triage and classification of alerts as true or false positives
- Investigate suspicious activities across endpoints, identities, and cloud environments
- Escalate confirmed incidents to Tier 2 / Incident Response teams with proper context
- Analyze logs from multiple sources, including CloudTrail, Azure Activity Logs, OS logs, and other relevant security data sources
- Document findings clearly in tickets and investigation reports
- Follow existing playbooks and contribute to improving detection logic over time
- Communicate clearly with internal teams and clients regarding alerts, findings, and escalations
- 1+ years of experience in SOC / Security Operations
- Hands-on experience with EDR tools such as CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint
- Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar
- Understanding of networking basics, including IP, DNS, HTTP/S, ports, and related concepts
- Basic knowledge of Linux and Windows operating systems
- Ability to analyze logs and identify suspicious behavior
- Fluent English, both written and spoken — mandatory
- Excellent verbal communication skills, especially in client-facing situations
Preferred Qualifications
- Experience with cloud environments such as AWS, Azure, or GCP
- Knowledge of GCP / Google Cloud Platform — significant advantage
- Ability to investigate cloud activity, including IAM, API calls, and resource changes
- Understanding of identity-based attacks, such as token abuse and privilege escalation
- Experience with scripting in Python or Bash
Similar Jobs
Professional Services • Consulting
Provide day-to-day administrative and coordination support to the Managing Director: manage correspondence, monitor tasks and commitments, maintain tracking systems, coordinate meetings, travel and paperwork, run business errands, handle sensitive information confidentially, and provide general executive support.
Top Skills:
Calendar/Scheduling ToolsExcelMicrosoft OutlookMicrosoft PowerpointMicrosoft Word
HR Tech • Professional Services • Consulting
Lead accounts receivable and credit management: set credit policy, manage collections and billing accuracy, monitor aging, improve cash flow, drive process automation, report performance, and develop the receivables team while collaborating with commercial and finance stakeholders.
Industrial • Manufacturing
Lead market intelligence and product strategy by analyzing customer behavior, competitors, pricing, and product positioning. Prepare reports and dashboards, coordinate with stakeholders and customers, maintain manufacturing and regulatory knowledge for assigned products, and support demos and technical presentations.
What you need to know about the Belfast Tech Scene
If asked to name the birthplace of the RMS Titanic, you might not say Belfast. Similarly, if asked to name Europe's leading destination for foreign direct investment in new software development, Belfast might not come to mind. Yet, both are true. The city has emerged as a tech powerhouse, recently ranked among the best in the U.K. for tech careers — especially for software developers. It also leads the U.K. with the highest percentage of software development jobs advertised.
