Ensign is hiring !Role OverviewThe Security Analyst (L1) is responsible for monitoring, detecting, and responding to security events and incidents. This role serves as the first line of defense within the Security Operations Centre (SOC), ensuring timely identification and escalation of potential threats.Key ResponsibilitiesMonitor security alerts and events using SIEM and other security toolsPerform initial triage and analysis of security incidentsInvestigate alerts to determine severity and impactEscalate confirmed or high-risk incidents to L2/L3 teamsDocument incidents, findings, and actions taken in ticketing systemsFollow standard operating procedures (SOPs) and playbooksAssist in incident response activities and containment actionsPerform basic log analysis across systems (e.g., network, endpoint, servers)Ensure timely response and resolution in line with SLAsSupport continuous improvement of SOC processes and documentationEducation & Experience:Diploma/Degree in IT, Computer Science, Cybersecurity, or related field0–2 years of experience in cybersecurity or IT support (fresh graduates are encouraged to apply)Technical Skills:Basic understanding of networking concepts (TCP/IP, DNS, firewalls)Familiarity with operating systems (Windows, Linux)Exposure to security tools (SIEM, antivirus, EDR) is an advantageBasic knowledge of cybersecurity concepts (threats, vulnerabilities, attack vectors)