Location: Azerbaijan (On-site)
Job Type: Full-time
Salary: Competitive, based on experience

About the Company

Proxima Tech Solutions is one of the leading companies providing innovative solutions in the field of cybersecurity. We specialize in professional cybersecurity services, focusing on threat monitoring, incident detection, and rapid response. Our mission is to strengthen our clients’ IT infrastructure security and provide real-time, effective defense against cyber threats. To achieve this, we are looking to expand our team with a Level 1 SOC Analyst who will monitor, analyze, and manage cybersecurity risks.

Job Description

The L1 SOC Analyst serves as the first line of defense in cybersecurity operations. This role is responsible for continuously monitoring security events, analyzing them, and initiating first-level responses according to predefined playbooks. It requires strong attention to detail and analytical thinking skills.

Key Responsibilities

Monitoring & Detection

• Continuously monitor alerts from SIEM, SOAR, and other security platforms
• Analyze daily security logs to identify anomalies
• Detect suspicious activities based on threat indicators

Incident Class

ification & Response

• Analyze and classify security incidents based on severity
• Perform initial investigations and escalate to L2 analysts when necessary
• Execute predefined incident response actions
• Handle incidents related to phishing, malware, unauthorized access attempts, DDoS, and other cyberattacks

Threat Intelligence & Reporting

• Gather threat intelligence data to improve detection capabilities
• Prepare daily and weekly incident reports and share them with relevant teams
• Report identified threats and vulnerabilities to SOC leadership

Collaboration & Development

• Collaborate closely with L2/L3 analysts, engineers, and other security teams
• Contribute ideas for new SOC procedures and strategic improvements

Requirements

Essential Skills:

• At least 1 year of experience in cybersecurity or a SOC role
• Basic knowledge of SIEM platforms (e.g., Splunk, ELK, QRadar)
• Understanding of network sec
• urity technologies (firewall, IDS/IPS, EDR/XDR)
• Experience working with Windows and Linux operating systems, including log analysis
• Familiarity with incident response and cybersecurity frameworks (e.g., MITRE ATT&CK, NIST)
• Ability to analyze security logs and detect anomalies
• Strong communication and documentation skills

Language Requirements:

• Azerbaijani – Required
• English – Required
• Russian – Preferred

Preferred Skills:

• Ability to write scripts in Python, Bash, or PowerShell for security automation
• Experience working with network and host-based threat detection systems
• Knowledge of phishing and social engineering attack analysis

Certifications (Not mandatory, but preferred):

• CompTIA Security+ – Basic cybersecurity knowledge
• EC-Council Certified SOC Analyst (CSA) – Ideal for SOC roles
• Splunk Certified Cybersecurity Analyst – Experience with SIEM
• Microsoft SC-200: Security Operations Analyst – Microsoft SOC environments
• IBM Certified Analyst
• Other similar industry-recognized certifications