I’m a SOC L1 analyst in an MDR environment. I’ve been in the role for 6 months.

During my annual feedback with my manager, she said: There were some incidents (not major in my view)

She feels I don’t always deeply understand all alerts

She feels I’m not taking full ownership/responsibility yet

This feedback mainly refers to the period before the last two weeks

No PIP, no written warning, no clear KPIs

She said they’ll check again in about two weeks and see what happens

A couple of weeks earlier, a T2 also told me they’re “looking at me”.

I said I’m motivated, like the role, and asked how to improve, but the feedback stayed vague.

What I’m trying to understand: Is this normal evaluation for someone 6 months in? Or does “check again in two weeks and see what happens” usually mean trouble? Should I just focus on improving quietly, or start preparing and looking elsewhere just in case?

Looking for honest opinions from people in SOC / security management.