SOC Analyst L1

Senthorus provides organizations with a state‑of‑the‑art solution to increase their security in the cloud and on their internal IT. Our 24/7 operations out of our Security Operations Centers (SOCs) located in Switzerland, leverage Blue Voyant's expertise while customers can be confident that all data is maintained and operated securely within Swiss borders – offering peace of mind without sacrificing oversight or effectiveness into cyber defense strategy.

This position is based in Geneva
and requires working on shift mode

Senthorus is a SOC entity (ELCA company) that will serve the Swiss market with world‑class managed security solutions, from Switzerland, with all data remaining in Switzerland, for Swiss and European clients.

Senthorus is looking for Security Operations Center (SOC) Analysts – L1 to help our global customers manage their IT security. You will play a vital role and be part of a fast‑paced team that helps customers to reduce the impact of security incidents and ensures that critical business operations continue unhindered.

You will be on the front line for monitoring security alerts that are generated by various tools from our customers.

• Monitor and analyze security events and alerts from multiple sources, including security information and event management (SIEM), XDR and NDR.
• Perform alerts triaging and investigate them.
• Create tickets, investigate & document security cases, and elevate to higher‑level security analysts or customers.
• Communicate with customer IT teams to inform them of issues, help them remediate, and ensure that they continue to operate business as usual.
• Perform security alerts triage of incoming issues (assess the priority, determine risk).
• Maintain a strong awareness of the current threat landscape.

• Minimum bachelor’s degree in Information Security, Computer Science, or other IT‑related field.
• Freshly graduated or up to 2 years of hands‑on SOC or security experience.
• Able and willing to work in a 24/7/365 environment, including nights, weekends and public holidays, on a rotating shift schedule.
• Hands‑on experience on at least one SIEM platform (Sentinel, Splunk, etc.).
• Hands‑on experience on at least one EDR platform (Microsoft Defender for Endpoint, Sentinel One, Crowdstrike, etc.).
• Excellent teamwork skills.
• Ability to learn new skills and grow in the cybersecurity industry.
• Ability to analyze event logs and recognize signs of cyber intrusions/attacks.
• Ability to handle high pressure situations in a productive and professional manner.
• Assist in maintaining SOC documentation, runbooks, and knowledge base articles.
• Fluent in French and/or English.
• Cyber Industry Certification is preferred (GIAC, etc.).