SOC Analyst Level 1

Main duty

Education / Qualifications

The SOC Level 1 analyst provides continuous monitoring of the bank’s information systems by analyzing real-time security alerts generated by our detection tools, and contributing to operational control of asset compliance. It performs a first sort (sorting), qualifies proven incidents and quickly escalates complex threats to the next level while respecting operational procedures. Activities and Tasks Monitoring and triage: Continuously monitor security consoles (SIEM, EDR, Firewall, IDS/IPS, Antimalware, DLP) and scan security alerts on time (SLA). Qualification and initial analysis: conduct an initial investigation to eliminate false positives and identify the nature of the incident (intrusion attempt, malware, data leak, etc.). Climbing: transmit alerts qualified as critical or complex to Team Lead SOC (Level 2) with a clear and structured preliminary report. Documentation: write the incident tickets accurately and record all actions carried out in the Incident Management System (ITSM). Monitoring and improvement: participating in the updating of operational documentation and monitoring of SOC performance indicators (KPIs).

Other information

Monitoring the coverage of security solutions: monitoring the deployment status of security solutions throughout the perimeter (desktops, servers, ATMs, and others), and generating periodic reports on their coverage rate. Support for vulnerability management: Participate in the execution of planned vulnerability scans, preliminary qualification of discovered vulnerabilities and notification of affected teams.

Candidate profile

Training: Bac +3/4 in Computer Science, Information Systems Security, System Administration, Networks and Telecommunications, or equivalent. Experience: 1 to 2 years of experience (a significant internship or first experience in information security or system/network administration is a major asset).

Required skills

Technical Skills (Hard Skills) Knowledge of basic network security concepts (TCP/IP, DNS, HTTP/S, SMTP). Understanding of network architectures and operating systems (Windows, Linux, Cloud). Basics in reading and analyzing system and application logs. Familiarity with SIEM tools (Splunk, ELK, IBM QRadar or equivalent). Ability to use vulnerability scanning tools (Qualys, Tenable, OpenVAS). Knowledge of EDR, antimalware, DLP and encryption (BitLocker) solutions. Mastery of office suites and ticketing tools (ITSM, Jira). Ability to produce automated status reports (Excel, Basic PowerBI). Basics on Vulnerabilities. Behavioral Skills (Soft Skills) Rigor, method, sense of analysis and critical thinking. Responsiveness and excellent stress management in emergency situations. Good writing and relational skills (team spirit, collaborative spirit). Spirit of analysis and technical curiosity. Absolute discretion and sensitivity to bank confidentiality issues. Rapid learning and continuing education. Perseverance and tenacity in monitoring stimulus to asset owners. Specific constraints Hours: shift work covering the hours of supervision 24h/7 or according to the SOC opening hours set by the bank. Astrentes: participation in the system of weekend and public holidays (weekly or monthly rotation). Environment: Exposure to a continuous stream of alerts requiring sustained attention.