SOC analyst L1

Pay in the destination countries

Monthly, in US dollars. Each country is an Imora admission package — open one for that route's fees, language requirement and deadline.

What does the day look like?

Between 60% and 70% of your shift is spent monitoring and triaging alerts. You sit in front of SIEM platforms such as Splunk Enterprise Security, Microsoft Sentinel, or IBM QRadar, along with EDR tools like CrowdStrike Falcon or SentinelOne, parsing security logs (syslog, Windows Event logs, firewall logs) to separate false positives from real incidents. Another 15% to 20% of your day goes into logging tickets in Jira Service Management or ServiceNow ITSM, running OSINT lookups via VirusTotal, AlienVault OTX, and AbuseIPDB, and escalating confirmed threats to Tier 2 analysts. Shift handovers, rule tuning to reduce alert spam, and standup meetings take 10% to 15%.

Active live combat against hackers makes up under 5% of daily work. Security Operations Centers run 24/7/365, which means you work rotational shift schedules (such as 4 days on, 4 days off, 12-hour shifts, or alternating day, evening, and night shifts), including mandatory weekend and public holiday cover.

Where does this lead?