Security Engineer - L1

The Security Engineer L1 Engineer is responsible for monitoring, detecting, and responding to basic network security incidents
. This is an entry-level role focused on operational security support, alert monitoring, and basic troubleshooting
.

Security Engineer L1 = Monitor alerts and issues → Analyze basic issues → Escalate serious threats → Maintain logs

• Analyze security alerts and logs coming from SOC
  to identify potential threats
• Perform initial incident triage and escalation to L2/L3 teams
• Respond to security incidents such as:
• Unauthorized access attempts
• Review firewall logs and assist in rule management
• Monitor VPN, endpoint security, and network access control systems
• Maintain incident records and documentation
• Perform routine security health checks
• Support vulnerability scans and basic remediation activities
• Follow standard operating procedures (SOPs) and security policies
• Basic understanding of:
• TCP/IP networking
• VPNs and network protocols
• Familiarity with:
• SIEM tools (e.g., Splunk, Sentinel)
• IDS/IPS systems
• Antivirus / endpoint protection tools
• Knowledge of:
• OSI model
• Common cyber threats (phishing, DDoS, malware)
• Strong analytical and problem-solving skills
• Ability to work in 24x7 shift environments
• Willingness to learn and grow in cybersecurity

• Computer Science / IT / Cybersecurity (or related field)
• OR relevant certifications such as:
• CompTIA Security+
• CCNA (or CCNA Security)
• CEH (optional for beginners)
• 0–2 years of experience in:
• Network support / SOC / IT helpdesk
• Fresh graduates with strong fundamentals may apply

• SIEM:
  Splunk, IBM QRadar, Microsoft Sentinel
• Endpoint Security:
  Crowd Strike, Symantec, Defender, Trelix