Tier 1 SOC Analyst

Job ID: 112854
Location: Rockville, Maryland  [Hybrid]
Category: App/Dev
Employment Type: Contract
Date Added: 06/16/2026

Apply Now

Fill out the form below to submit your information for this opportunity. Please upload your resume as a doc, pdf, rtf or txt file. Your information will be processed as soon as possible.


 
 
 
 
 
(Word, PDF, RTF, TXT)
* Required field.

Role Summary
The CIOCC Tier 1 Analyst monitors and analyzes security events and incidents to support timely detection, investigation, and escalation. This role operates within a security operations environment, responding to alerts originating from SIEM, firewall, IDS/IPS, endpoint security, and network access control systems. The analyst will help ensure incident handling processes are followed while maintaining clear, accurate documentation. This is a hybrid on-site role requiring active presence at the assigned office location.

Responsibilities 

  • Analyze and respond to security events and incidents from SIEM and related data sources
  • Monitor alert activity across security tools, including firewall, IDS, IPS, endpoint security, and NAC
  • Conduct initial triage to determine severity, potential impact, and appropriate next steps
  • Investigate alerts using log data and available security telemetry
  • Perform incident documentation in accordance with established procedures and standards
  • Escalate suspected security incidents to higher-tier analysts or appropriate teams
  • Validate event context by correlating information across multiple security systems
  • Support investigations using packet capture and analysis when required
  • Identify patterns and trends in recurring alerts to improve handling efficiency
  • Assist with maintaining operational readiness of security monitoring workflows

Qualifications 

  • 1–3 years of security operations center (SOC) experience or recent college graduate with industry certifications
  • Experience working with operating systems including Windows and Linux/UNIX in a functional capacity
  • Ability to communicate technical details clearly through written and verbal communication
  • Experience with Splunk or a comparable SIEM tool
  • Knowledge of IDS log analysis and related detection/alerting concepts
  • Familiarity with packet capture tools and basic analysis techniques
  • Understanding of well-known protocols and services such as FTP, HTTP, SSH, SMB, and other relevant services
  • Availability for second shift (12:00–22:00) or third shift (20:00–06:00), based on staffing needs
  • This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required. 

Publishing Pay Range: $27.00 – $32.00 hourly
This is a hybrid on-site role requiring active presence at the assigned office location.