SOC Analyst L1- 24x7

Devoteam is a leading European consultancy focused on digital strategy, technological platforms, cybersecurity, and business transformation through technology. Technology is in our DNA and we believe in it as a lever capable of driving change for improvement, maintaining a balance that allows us to offer our client portfolio top-tier technological tools but always with the closeness and professionalism of a team that acts as a guide along the way. Devoteam has been committed to technology at the service of people for more than 30 years. With more than 10,000 people in the group, in 20 countries across Europe, the Middle East, and Africa.

We are looking for a dedicated L1 Security Operations Center (SOC) Analyst to join our cybersecurity team. B2-C1 English level required (oral, written, and reading). Rotating 8-hour shifts Morning-Afternoon-Night Necessary technologies: Experience with SIEM platforms (Google SecOps, Microsoft Sentinel, PaloAlto XSIAM, CrowdStrike NGSIEM).

Knowledge of incident response methodologies.

Experience with EDR tools (CrowdStrike Falcon, Sophos Intercept X, SentinelOne, Microsoft Defender ATP).

Functions: Security monitoring and triage/alert management Monitor security events and alerts from various tools, including SIEM, IDS/IPS, EDR, and other security platforms.

Perform initial triage and identification of security alerts based on established procedures.

Escalate verified security incidents to L2 analysts following documented escalation procedures.

Maintain accurate documentation of all security events and actions taken.

Support in incident response Assist in initial incident response activities under supervision.

Collect and preserve evidence related to security incidents.

Follow established playbooks and standard operating procedures (SOP).

Communicate incident status to the corresponding stakeholders in a timely manner.

Threat analysis and intelligence Review and analyze security alerts to determine their legitimacy and potential impact.

Perform basic searches and enrichment of IoC (Indicators of Compromise) using threat intelligence platforms.

Support L2/L3 analysts with data collection during threat hunting activities when requested.

Stay up to date with the current threat landscape and emerging security trends.

Documentation and reporting Create detailed incident reports and maintain accurate case documentation.

Update security incident tracking systems with relevant information.

Participate in post-incident reviews and lessons learned sessions.

Contribute to knowledge base articles and procedure documentation.

English B2-C1