What is a SOC? My First Step into Security Operations

A SOC is a team that continuously monitors an organization's systems, networks, and security alerts to identify and respond to possible cyber threats.

When I first started learning about SOC, I found terms like SIEM, EDR, IOC, IOA, and incident response confusing. Slowly, I started understanding how these technologies and processes work together.

What does a SOC analyst do?

A SOC analyst monitors security alerts and investigates suspicious activities. For example, if a user successfully logs in from India and shortly afterward there is a successful login from another country, the activity could require investigation.

A SOC analyst may:

• Monitor security alerts
• Investigate suspicious activities
• Analyze logs
• Identify Indicators of Compromise (IOCs)
• Escalate serious incidents
• Document and report findings

Learning about SIEM

One of the important technologies I am currently learning is SIEM (Security Information and Event Management).

SIEM collects and analyzes logs from different sources such as servers, endpoints, applications, and network devices. It can help security teams detect unusual activities and investigate incidents.

I am still at the beginning of my SIEM journey, but practicing with tools and security labs is helping me understand the concepts better.

My Learning Journey

Cybersecurity has a lot to learn, and I am realizing that becoming good at it takes consistent practice.

Right now, I am focusing on understanding:

SOC → SIEM → Log Analysis → Alert Triage → Incident Response

My goal is to gradually build practical skills and become ready for a SOC Analyst role.

This is just one step in my cybersecurity journey, but I am enjoying the process of learning something new every day.

Keep learning. Keep practicing. Keep improving.

#Cybersecurity #SOC #SIEM #CyberSecurityJourney #InformationSecurity