SOC Analyst L1 - Internship

Opportunity to work with real-time SIEM, XDR and SOC platforms and helping organizations monitor and defend enterprise systems.

• This role requires a mandatory 2-year commitment (1 year internship + 1 year full-time employment after successful conversion)
• Upon successful full-time conversion, the internship duration will be considered as relevant work experience.

• Monitor SIEM dashboards and security alerts to identify suspicious activities and potential threats.
• Perform initial investigation and triage of incidents such as phishing, malware, suspicious logins and endpoint alerts.
• Analyse logs from firewalls, servers, endpoints, applications and cloud platforms.
• Document investigation findings and escalate confirmed or high-risk incidents to senior SOC analysts.
• Assist in maintaining incident records, SOC reports, playbooks and shift handover notes.

• Must have completed formal training in SOC operations, SIEM, or Blue Team fundamentals from a recognized training institute.
• Prior hands-on exposure to SIEM platforms (such as Wazuh, Splunk, or Microsoft Sentinel) in lab or training environments
• Good understanding of security monitoring concepts, alert handling, and log analysis (Windows, Linux, network logs).
• Ability to analyze security alerts, perform basic triage, and escalate incidents as per defined procedures.
• Basic knowledge of networking, operating systems, and common attack techniques.
• Strong written and verbal communication skills in English.