SOC Analyst Tier 1 (24/7 Shift)

About the role

We are seeking a SOC Analyst Tier 1 to join our 24/7 Security Operations Center at a leading healthcare organization in Central Israel. The role involves continuous monitoring of security systems, detecting and investigating alerts, and escalating incidents within a complex enterprise environment.

Key responsibilities

• Monitor security tools and enterprise environments around the clock.
• Identify, investigate, classify and triage cybersecurity alerts.
• Distinguish false positives from genuine incidents and document incidents.
• Escalate relevant events to Tier 2 analysts.
• Operate SIEM and SOAR platforms, creating and maintaining detection rules.
• Ensure accurate shift handovers and collaborate with infrastructure, development, cloud, DevOps, MLOps and AIOps teams.
• Work closely with incident response, research, red‑team and other cybersecurity groups.

Required profile

• At least 1 year of experience in a SOC environment.
• Experience with SOAR platforms (minimum 1 year).
• Familiarity with SIEM tools, preferably Splunk.
• Good understanding of TCP/IP, DNS and HTTP/HTTPS.
• Knowledge of Windows and Linux operating systems.
• Relevant academic background or professional cybersecurity training.
• Fluent in Hebrew and English.
• Willingness to work 24/7 shifts, including Friday and Saturday, with on‑call coverage.

Required skills

• SOC operations
• SOAR platforms
• SIEM (Splunk)
• Network protocols: TCP/IP, DNS, HTTP/HTTPS
• Windows OS
• Linux OS