SOC Analyst L1 (Blue Team)

We are strengthening our Cybersecurity team with an SOC Analyst L1 , responsible for monitoring alerts, performing initial event analysis, and ensuring proper execution of incident response procedures. We are looking for someone with a solid technical foundation, strong prioritization skills, and the motivation to grow within a dynamic Blue Team environment.

Main Responsibilities

• Monitor security alerts and events using SIEM and SOAR tools.
• Perform initial incident analysis following predefined playbooks.
• Escalate incidents to L2 when deeper investigation is required.
• Record, document, and update all tickets, ensuring traceability and high‑quality information.
• Maintain and update the knowledge base , contributing to continuous improvement.
• Collaborate effectively with internal security and infrastructure teams.
• 2+ years of proven experience as an SOC Analyst L1.
• Hands‑on experience operating SIEM/SOAR platforms and executing incident response workflows (mandatory).
• Strong knowledge in use case creation and log analysis .
• Familiarity with the ITIL framework (incident, problem, and change management).
• Experience with ticketing systems and workflow tools (e.g., Remedy).
• Preferred certifications: ITIL, ISO27001, CEH, BTL1, CompTIA Security+ (or equivalent).
• Strong organizational skills and high attention to detail.
• Good communication skills and ability to work collaboratively in a team environment.
• Availability to work in 24/7 rotating shifts .
• Workplace type: Hybrid (max. of 3 times per week in the office).
• Location: Ponta Delgada, Açores.