Tier 1 SOC Analyst

This position involves monitoring, analyzing, and responding to security events and incidents within a security operations center environment. The analyst will utilize various security tools and data sources to ensure the protection of information systems. This role requires technical expertise, strong communication skills, and the ability to work during designated shifts.

Responsibilities

• Analyze security events and incidents from SIEM, firewall, IDS, IPS, endpoint security solutions, and other data sources.
• Respond to and investigate security alerts to identify potential threats or vulnerabilities.
• Collaborate with team members to escalate and mitigate security issues promptly.
• Maintain knowledge of current security threats, trends, and mitigation techniques.
• Document security incidents, actions taken, and outcomes clearly and accurately.
• Support the implementation and maintenance of security monitoring tools, including Splunk or similar SIEM platforms.
• Assist with log analysis, packet capture, and review of network protocols and services.
• Contribute to the development and refinement of security processes and procedures.
• Work on assigned shifts, including second shift (12 p.m. – 10 p.m.) or third shift (8 p.m. – 6 a.m.).
• Adhere to agency and client-specific security and compliance requirements.

Qualifications

• 1-3 years of experience in a security operations center environment or recent college graduate with relevant industry certifications.
• Familiarity with various operating systems, including Windows, Linux, or UNIX.
• Experience with SIEM tools such as Splunk or equivalent.
• Strong written and verbal communication skills with the ability to convey technical information clearly.
• Must be legally authorized to work in the United States without employer sponsorship, now or in the future and able to obtain and retain the necessary security clearance.
• Availability to work on-site at the designated location.
• Proficiency in analyzing IDS logs and using packet capture tools.
• Knowledge of protocols including FTP, HTTP, SSH, SMB, and DAP.
• Industry certifications such as CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, or GPEN are preferred.

Publishing Pay Range: $30.00 – $31.00 Hourly

This position is based in office and requires employee to work on-site.