SOC Analyst L1 (Blue Team)

Job Description

We are strengthening our Cybersecurity team with an SOC Analyst L1, responsible for monitoring alerts, performing initial event analysis, and ensuring proper execution of incident response procedures. We are looking for someone with a solid technical foundation, strong prioritization skills, and the motivation to grow within a dynamic Blue Team environment.

Main Responsibilities:

• Monitor security alerts and events using SIEM and SOAR tools.
• Perform initial incident analysis following predefined playbooks.
• Escalate incidents to L2 when deeper investigation is required.
• Record, document, and update all tickets, ensuring traceability and high‑quality information.
• Maintain and update the knowledge base, contributing to continuous improvement.
• Collaborate effectively with internal security and infrastructure teams.

Qualifications

• 2+ years of proven experience as an SOC Analyst L1.
• Hands‑on experience operating SIEM/SOAR platforms and executing incident response workflows (mandatory).
• Strong knowledge in use case creation and log analysis.
• Familiarity with the ITIL framework (incident, problem, and change management).
• Experience with ticketing systems and workflow tools (e.g., Remedy).
• Preferred certifications: ITIL, ISO27001, CEH, BTL1, CompTIA Security+ (or equivalent).
• Strong organizational skills and high attention to detail.
• Good communication skills and ability to work collaboratively in a team environment.
• Availability to work in 24/7 rotating shifts.

Additional Information

• Workplace type: Hybrid (max. of 3 times per week in the office).
• Location: Ponta Delgada, Açores.