SOC Associate Analyst – Entry Level Security Operations

About the role

The SOC Associate Analyst provides supervised security monitoring and alert triage within a fast‑growing Information Security team. This foundational position offers hands‑on experience across networks, endpoints, identity, cloud services and the SOC toolset.

Key responsibilities

• Monitor Microsoft Sentinel, Microsoft Defender XDR, Cortex XSIAM (or equivalent) and acknowledge alerts within SLA.
• Validate alert entities such as users, endpoints, IP addresses, cloud resources and applications.
• Execute approved investigation playbooks, identify benign activity, duplicates and false positives.
• Perform initial phishing and suspicious email checks and review basic endpoint and account activity.
• Capture investigation evidence in the case‑management platform and escalate high‑risk or inconclusive activity.
• Maintain accurate ticket categorisation, participate in shift handovers and complete required training.

Required profile

• 1–2 years of cybersecurity or related IT experience; service‑desk, NOC or cloud‑support background is a plus.
• Works under close supervision initially and is expected to become independently competent in common alert types.
• Basic knowledge of Windows, Linux, Microsoft 365, Azure, Entra ID, networking (TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls) and common threat types (phishing, malware, brute‑force).
• Relevant qualifications such as a Computer Science degree, Cisco CCNA, CompTIA A+, Microsoft SC‑900, AZ‑900 or Palo Alto Cortex XSIAM foundation training.

Required skills

• Microsoft Sentinel
• Microsoft Defender XDR
• Palo Alto Cortex XSIAM
• Windows and Linux operating systems
• Microsoft 365 and Azure fundamentals
• Entra ID (users, groups, authentication, MFA, sign‑in logs)
• TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls
• Phishing analysis, malware detection, endpoint detection
• Cisco CCNA, CompTIA A+, Microsoft SC‑900, AZ‑900