Security Engineer – Level 1 (Entry‑Level)

About the role

The Security Engineer L1 provides first‑line monitoring, detection and response for network security incidents. This entry‑level position supports the Security Operations Center (SOC) by analysing alerts, performing basic triage and escalating complex threats to senior teams.

Key responsibilities

• Analyse security alerts and logs from SIEM platforms to identify potential threats.
• Perform initial incident triage and forward serious cases to L2/L3 responders.
• Respond to malware detections, unauthorized access attempts and suspicious network activity.
• Review firewall logs, assist with rule management and monitor VPN, endpoint and network access controls.
• Maintain incident records, documentation and routine security health checks.
• Support vulnerability scanning and basic remediation activities following SOPs.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field, or equivalent certifications.
• 0–2 years of experience in network support, SOC, or IT help‑desk environments.
• Strong analytical mindset, attention to detail and ability to work in a 24x7 shift schedule.
• Eagerness to learn and grow within the cybersecurity field.

Required skills

• TCP/IP networking
• Cisco, Fortinet and Palo Alto firewalls
• VPN technologies and common network protocols
• SIEM tools such as Splunk, Microsoft Sentinel and IBM QRadar
• IDS/IPS systems
• Antivirus/endpoint protection tools (CrowdStrike, Symantec, Microsoft Defender, Trelix)
• OSI model knowledge
• Understanding of common threats: phishing, DDoS, malware
• Monitoring tools like SolarWinds and Nagios