L1 SOC Analyst

About the role

The L1 SOC Analyst will join CyberDome’s 24/7 Security Operations Centre in Abuja, providing first‑line monitoring, alert triage and incident escalation for enterprise and government clients. The role involves continuous surveillance of security events, initial investigations and hand‑over to senior analysts according to defined playbooks and SLAs.

Key responsibilities

• Monitor SIEM dashboards (Securonix, Splunk, Rapid7 InsightIDR, IBM QRadar) and perform initial triage of alerts, distinguishing false positives from genuine threats.
• Conduct first‑level investigations of suspicious activities, gather evidence, document findings in JIRA and execute basic containment actions such as host isolation or account disabling.
• Review and analyse logs from endpoints, servers, network devices and cloud platforms, ensuring log source health and generating daily shift reports.
• Consume threat‑intelligence feeds, enrich indicators of compromise and report emerging threats to senior analysts.
• Adhere to SOC SOPs, runbooks and escalation matrices, maintaining accurate incident documentation and shift handover.

Required profile

• Strong analytical and problem‑solving abilities with high attention to detail.
• Excellent written and verbal communication skills and ability to work under pressure within strict SLAs.
• Willingness to relocate to Abuja and work rotating day, night, weekend and public‑holiday shifts.

Required skills

• Experience with SIEM platforms such as Securonix, Splunk, Rapid7 InsightIDR or IBM QRadar.
• Familiarity with EDR/XDR tools like CrowdStrike Falcon, Sophos or Microsoft Defender for Endpoint.
• Proficiency in Windows and Linux operating systems and basic networking concepts (TCP/IP, DNS, HTTP/HTTPS, VPN).
• Use of ticketing system JIRA and threat‑intelligence sources (VirusTotal, AbuseIPDB, AlienVault OTX, ANY.RUN).