SOC Analyst-Tier 1 (R-00068)
True Zero TechnologiesSalary not specified
- Full Time
- Junior (1 to 2 years)
Not SpecifiedCompensation
Junior (1 to 2 years)Experience Level
Full TimeJob Type
UnknownVisa
CybersecurityIndustries
Requirements
Candidates should possess 1-3 years of hands-on SOC experience performing alert triage, incident handling, and first-responder containment, with daily experience using SIEM/SOAR, EDR, IDS/IPS, firewalls/proxies, and email-security tools, along with practical knowledge of Windows, macOS, and Linux internals and logging. Proficiency in search/query languages (LQL, SPL, KQL, SQL) and understanding of TCP/IP, OSI layers, and common protocols are also required.
Responsibilities
The Incident Response Analyst will provide continuous coverage for SIEM/SOAR, EDR, network, cloud, and email-security consoles, validating alerts, enriching with context, suppressing false positives, and acting on confirmed threats. They will gather evidence from logs, host telemetry, and threat-intel feeds to determine scope, severity, and business impact, execute pre-approved playbook actions, escalate high-severity incidents, record investigative steps, and identify noisy rules to improve alert fidelity. Furthermore, they will participate in refining runbooks, drafting new ones, and championing automation opportunities, and collaborate with a diverse team to deliver shift-handoff notes and explain technical risk to stakeholders.
Skills
Incident Response
Alert Investigation
Live Response
Containment
Remediation
Log Analysis
Endpoint Telemetry
Security Operations
Threat Detection
Crowdstrike
Cloud-native endpoint security solutions provider
About Crowdstrike
CrowdStrike specializes in cybersecurity, focusing on protecting businesses from cyber threats through cloud-native endpoint security solutions. Their main product, the Falcon platform, includes services like Falcon Pro, which replaces traditional antivirus with next-generation antivirus that integrates threat intelligence, Falcon Insight for endpoint detection and response, and Falcon Device Control to manage connected devices. Unlike many competitors, CrowdStrike's services are subscription-based, allowing clients to choose different levels of protection based on their needs. The company serves a diverse clientele, including many Fortune 100 companies, and is recognized as a leader in the cybersecurity field, known for its effectiveness in threat detection and response.
Key Metrics
Austin, TexasHeadquarters
2011Year Founded
$468MTotal Funding
IPOCompany Stage
Enterprise Software, CybersecurityIndustries
5,001-10,000Employees