SOC 一级分析师
SOC Tier 1 Analyst
这是一个远程职位。
SOC 一级分析师是安全运营中心的前线防御者。该职位负责持续监控安全事件，执行警报分类，记录调查结果，验证可疑活动，并根据既定流程升级确认的威胁。SOC 一级分析师是安全运营中心内的第一道网络安全防线。该职位负责持续监控安全工具，审查警报，识别可疑活动，并对潜在的安全事件进行初步调查。分析师是组织的前线防御者，通常是第一个发现恶意活动迹象的人。
一级分析师会审查由安全技术生成的警报，包括SIEM平台、EDR解决方案、电子邮件安全系统、网络监控工具、云安全平台和威胁情报源。分析师需要判断该活动是否为误报、策略违规，或是需要升级的潜在安全事件。
该职位要求具备严谨的分析思维、细致的关注力，能够在遵循既定流程的同时保持对整体威胁环境的意识。分析师负责记录调查结果，创建事件工单，收集初步证据，并在需要时将事件升级至更高级别的分析师。
要求
成功的候选人必须具备扎实的网络安全基础，包括网络概念、操作系统、认证机制、恶意软件行为、钓鱼技术以及常见的攻击方法。分析师应了解TCP/IP、DNS、HTTP、Active Directory、VPN技术和云安全基础。
候选人必须展示使用SIEM平台、安全仪表板、日志分析工具、端点检测解决方案、工单系统和事件管理流程的经验。出色的书面沟通能力至关重要，因为分析师需要清晰地记录调查并提供简洁的事件摘要。
该职位要求能够在24x7的运作环境中有效工作，并在高警报量期间保持专注。候选人应表现出好奇心、适应能力和持续学习新技术和威胁行为者技术的意愿。
查看英文原文
This is a remote position.
The SOC Tier 1 Analyst serves as the frontline defender within the Security Operations Center. This position is responsible for continuous monitoring of security events, performing alert triage, documenting investigative findings, validating suspicious activity, and escalating confirmed threats according to established procedures. The SOC Tier 1 Analyst serves as the first line of cyber defense within the Security Operations Center. This position is responsible for continuously monitoring security tools, reviewing alerts, identifying suspicious activity, and conducting initial investigations of potential security events. The analyst serves as the organization's frontline defender and is often the first person to identify indicators of malicious activity.
The Tier 1 Analyst reviews alerts generated by security technologies including SIEM platforms, EDR solutions, email security systems, network monitoring tools, cloud security platforms, and threat intelligence feeds. The analyst determines whether activity represents a false positive, a policy violation, or a potential security incident requiring escalation.
The position requires disciplined analytical thinking, attention to detail, and the ability to follow established procedures while maintaining awareness of the broader threat landscape. The analyst is responsible for documenting findings, creating incident tickets, collecting initial evidence, and escalating incidents to higher-level analysts when required.
Requirements
The successful candidate must possess a strong understanding of cybersecurity fundamentals including networking concepts, operating systems, authentication mechanisms, malware behavior, phishing techniques, and common attack methods. The analyst should understand TCP/IP, DNS, HTTP, Active Directory, VPN technologies, and cloud security fundamentals.
The candidate must demonstrate experience using SIEM platforms, security dashboards, log analysis tools, endpoint detection solutions, ticketing systems, and incident management workflows. Strong written communication skills are essential because analysts must document investigations clearly and provide concise incident summaries.
The position requires the ability to work effectively in a 24x7 operational environment while maintaining focus during periods of high alert volume. Candidates should demonstrate curiosity, adaptability, and a willingness to learn new technologies continuously and threat actor techniques.
Typical certifications include Security+, CySA+, GSEC, SSCP, or equivalent cybersecurity certifications.
The candidate must have a minimum of Secrete Clearance.
Benefits
At Defianx, we believe that great people build great outcomes. We are committed to supporting our employees with a competitive benefits package designed to promote health, professional growth, work-life balance, and long-term career success.
Eligible employees have access to medical benefits, paid time off, paid holidays, professional development opportunities, certification support, and flexible work arrangements based on customer and operational requirements.
As a growing cybersecurity company, we invest in our team by fostering a collaborative culture that values continuous learning, innovation, and excellence. Employees are encouraged to expand their technical expertise, pursue industry certifications, contribute to mission-critical initiatives, and grow their careers alongside the company's success.
Defianx is committed to creating an environment where talented professionals can thrive while delivering exceptional value to our customers.
Originally posted on Himalayas