L1 SOC Analyst

Job not on LinkedIn

🔥 5 minutes ago

🇬🇪 Georgia – Remote

⏰ Full Time

🟢 Junior

🛡️ Security Operations

🚫👨‍🎓 No degree required

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

KVG

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

KVG is a globally positioned and locally integrated company providing a vast array of products and services including home store and office accessories, batteries, chargers, ergonomic office supplies, technology and office equipment, and computer and tablet accessories. They also offer complex program management, troop and mission support, and procurement solutions. Additionally, KVG delivers logistics and support through services such as air charter, hotel and lodging, internet and mobile data services, linehaul services, and facility supplies. KVG is committed to system integration, sourcing, and delivering solutions that meet a wide spectrum of customer needs.

📋 Description

• Monitor and triage incidents in Microsoft Sentinel and Microsoft Defender XDR by severity • Determine whether alerts are true positives, false positives, or benign and document the rationale • Review Defender for Office 365 quarantine and handle user-reported phishing • Make release or block decisions for quarantined content • Analyze message headers, SPF/DKIM/DMARC results, URLs, and attachments • Run pre-built KQL queries in Advanced Hunting to identify affected users and assets • Apply runbook-defined containment, including revoking sessions, blocking sign-in, isolating devices, and purging delivered messages • Escalate matters beyond the mandate with timelines, evidence, and actions already taken • Maintain audit-ready case records and provide clean shift handovers • Identify noisy detections and recurring false positives for tuning • Work alongside the Cloud Security Engineer in a Microsoft-based environment • Grow from L1 triage into L2 analysis

🎯 Requirements

• 1+ year in IT support, service desk, systems administration, or a security operations role • Strong candidates with certifications and demonstrable lab work may be considered without commercial security experience • Working knowledge of Microsoft 365 and a cloud-first or hybrid environment • Networking and mail flow fundamentals: TCP/IP, DNS, SMTP, MX records, VPN, and firewall concepts • Windows and macOS fundamentals, including processes, logons, and log locations • Understanding of common attack techniques: phishing, credential theft, MFA fatigue, token theft, and malware delivery • Professional written and verbal English • Case notes and escalations written in English • Discipline to follow a runbook exactly and judgement to escalate early rather than improvise • Hands-on exposure to Microsoft Sentinel, Defender XDR, Defender for Office 365, or Entra ID • Ability to read and adapt a KQL query or use basic PowerShell • CompTIA Security+ or Microsoft SC-900 preferred • Familiarity with MITRE ATT&CK • Awareness of NIST SP 800-171, CMMC 2.0, or GDPR

🏖️ Benefits

• Funded Microsoft certification path, with the SC-200 exam paid by KVG • Defined progression route from L1 triage to L2 analysis • Direct mentoring from the Cloud Security Engineer • European business-hours coverage with rotational extended-hours support for other regions • Single-vendor Microsoft security stack exposure: Sentinel, Defender XDR, Entra ID, Intune, and Purview