Back
Tier-1 brand, metro location, and generalist SOC Tier-1 role increase candidate competition.
Role requires SOC-specific tools and processes, so cross-industry transferability is limited.
Few explicit requirements but SIEM and incident-response skills impose moderate filtering.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Perform first-level triage and validation of security alerts using centralized SIEM (Google SecOps) to identify true/false positives and apply initial containment measures.
Support incident response by providing initial investigative data, containment assistance, and incident documentation in FireHydrant during high-severity security incidents.
Monitor security health via Capability Dashboards, maintain and optimize automated response playbooks, and communicate findings to SOC and system owners to facilitate escalations and post-incident reviews.
Minimum 1+ year experience in IT, Security Operations, Help Desk, or similar technical support role.
Experience with troubleshooting hardware, software, and access issues.
Understanding of core security concepts including IAM, endpoint protection, and OSI model.
Familiarity with SIEM/SOAR platforms (Google SecOps preferred).
Operates effectively within security operations centers, handling automated triage and escalation workflows.
Comfortable collaborating across teams to bridge SOC and system owners, communicating complex security information clearly.
Some exposure to cloud environments (GCP preferred), scripting (Python/Bash), and retail security or compliance standards is advantageous but not mandatory.