Entry-Level SOC Analyst (L1) – 24/7 Security Operations

About the role

AgileBlue is seeking motivated Level 1 SOC Analysts to join its 24/7 security operations center. In this entry‑level position you will work a structured, playbook‑driven queue, triaging alerts, identifying benign activity, and escalating genuine threats while gaining hands‑on experience with an AI‑native security platform.

Key responsibilities

• Develop working knowledge of the AgileBlue platform and SOC procedures through hands‑on case work and training.
• Monitor and triage security alerts during assigned shift hours, following established playbooks.
• Apply appropriate response paths for each alert category and document findings for client handoff.
• Investigate suspicious activity, determine scope and intent, and close benign cases with proper documentation.
• Analyze breach patterns, flag false positives, and report emerging vulnerabilities.
• Escalate genuine threats to clients and hand off complex cases to L3 analysts.

Required profile

• 0–2 years of SOC or security operations experience, or a career changer with relevant certifications and lab work.
• Familiarity with common alert categories such as endpoint detections, network anomalies, identity events, and phishing indicators.
• Comfortable reading raw logs to assess alert validity.
• Experience with at least one SIEM or security platform (work, coursework, or self‑study).
• Clear written communication and reliable shift commitment.

Required skills

• SIEM usage
• Log analysis
• Endpoint detection
• Network anomaly detection
• Identity event analysis
• Phishing indicator analysis

What we offer

• Competitive base salary
• 401(k) with company match
• Unlimited PTO
• Paid training and certification support
• Clear, measurable path to advancement