SOC Analyst Tier 1

We are seeking an experienced and motivated Tier 1 SOC Analyst to strengthen our Security Operations Center team. You will be part of Netox’s 24/7 SOC service and help protect our clients’ business from evolving cyber threats. In this role you will not only react to alerts but actively participate in threat identification, analysis, and ongoing SOC improvement. You will work closely with other SOC analysts, security specialists, internal stakeholders, and client organizations to maintain and enhance security. This position can be performed at our Helsinki-Vantaa (Ilmala) or Oulu offices. Work is done 100% on Netox SOC premises; remote work is not available. The shift pattern is uninterrupted 12-hour shifts, 2 shifts. Primary duties include monitoring security environments with SOC and SIEM solutions, investigating and prioritizing alerts, identifying anomalous activity and early attack indicators, conducting initial investigations and response actions, escalating to Tier 2/3 or client specialists, documenting findings and processes, and contributing to playbooks and automation. What we expect: proven operational information security experience and genuine interest in cybersecurity; 2+ years in SOC/security or related fields; solid understanding of cybersecurity fundamentals, attack techniques and threat detection; experience with log analysis and security incident investigations; hands-on experience with SIEMs (Microsoft Sentinel, Splunk, QRadar or equivalents); understanding of IT infrastructure (servers, networks, endpoints); ability to make decisions and prioritize under pressure; experience with documentation and process-driven environments; proactive attitude and willingness to improve current practices; strong Finnish and English communication. Nice to have: experience with SOAR, EDR/XDR (Microsoft Defender, CrowdStrike, SentinelOne, etc.); incident response experience; knowledge of MITRE ATT&CK; relevant education in cybersecurity/IT; certifications such as SC-200/SC-900/AZ-500/CSA. What we offer: opportunity to work in a demanding modern SOC environment; exposure to the latest cyber security phenomena and threats; support from experienced professionals and a clear path to Tier 2/3; modern tooling and evolving environment; chance to influence SOC service development; competitive salary and employee benefits; team with strong collaboration and can-do attitude. Applications end 31.10.2026; interviews during the application phase. Contact: Tuomas Rautava, 24/7 Operations Manager.