The Role
The SOC Analyst Level 1 serves as the first line of defense within a Private 5G Security Operations Center. This role is responsible for continuous monitoring, initial analysis, and triage of security events to ensure the confidentiality, integrity, and availability of 4G/5G network environments. The position plays a critical role in early threat detection, incident documentation, and escalation, supporting overall SOC effectiveness and service continuity.
Duties And Responsibilities
- Act as first responders to cybersecurity alerts and potential incidents within a 5G SOC environment.
- Monitor security dashboards, alerts, and logs specific to 4G/5G RAN and Core networks.
- Analyze and triage security events to identify potential threats or incidents.
- Maintain accurate and up-to-date incident logs, records, and documentation.
- Identify basic patterns and trends in security events and report findings to senior analysts.
- Provide initial response and basic support during security incidents as per defined procedures.
- Escalate incidents requiring deeper investigation to SOC L2 analysts in a timely manner.
- Ensure adherence to established security policies, procedures, and SOC operating standards.
- Stay informed on emerging threats, vulnerabilities, and risks impacting 5G networks.
- Support continuous SOC operations by working in shifts to ensure 24/7 coverage.
Requirements
- Bachelors degree in Computer Science, Information Security, or a related discipline.
- Basic understanding of TCP/IP, OSI Seven Layer Model, and network fundamentals.
- Foundational knowledge of cybersecurity concepts, principles, and threat landscapes.
- Familiarity with 4G/5G technologies, protocols, and associated security risks.
- Hands-on or working knowledge of SIEM and SOAR platforms.
- Experience or exposure to 4G/5G Security Operations is required.
- Experience working in ISP or telecom environments is an added advantage.
- Exposure to Splunk and Microsoft Sentinel is preferred.
- Experience across IT and OT environments is desirable.
- Strong analytical, problem-solving, and incident-handling skills.
- Effective communication skills with the ability to document and escalate incidents clearly.
- Willingness to work rotational shifts for continuous SOC coverage.
- Relevant certifications are preferred, including CompTIA Security+, CSA (Certified SOC Analyst), CCNA CyberOps, and CySA+.