The primary role of a Security Analyst (L1) is the detailed and repeatable execution of all operational tasks as documented in processes and subordinate procedures. Specifically, these analysts will be responsible for monitoring the SIEM tools for security events and closing or escalating those events as necessary. Security Analysts maintain the group email address and distribution lists, answer the main phone lines, and update all relevant documentation such as shift logs and tickets. Additionally, assist the MDR Analyst in an incident workflow and assist the MDR team in incident detection, remediation and communicate with external teams in proper incident resolution.

Required Technical skills:

• Experience with SIEM tools (Sentinel, Splunk, Logrhythm, etc.).
• Experience in Azure Sentinel.
• Familiarity with common IDS/IPS and Firewalls (Snort, Cisco, Fortigate, Sourcefire) .
• Familiarity with incident response process...