Tier 1 SOC Analyst

Role Summary

• Monitor, analyze, and respond to security events from SIEM, firewall, IDS/IPS, endpoint security, and Network Access Control systems.
• Investigate security events using log analysis, packet capture tools, and network protocol analysis.
• Monitor security alerts and elevate critical or higher-risk issues according to established procedures.
• Develop and maintain security documentation, incident reports, and analysis findings.
• Collaborate with security team members to improve threat detection strategies and operational workflows.
• Support ongoing security operations and incident response activities.
• Analyze security events to distinguish false positives from potential security threats.
• Follow established security standards, procedures, and cybersecurity best practices.
• Maintain knowledge of emerging cybersecurity threats, vulnerabilities, and security practices.
• Communicate technical findings clearly to team members and stakeholders.

• 1 to 3 years of experience in a Security Operations Center (SOC), cybersecurity operations, or a related environment, or relevant industry certifications.
• Relevant education, training, certifications, or equivalent practical experience.
• Experience working with operating systems such as Windows, Linux, or UNIX.
• Experience with SIEM technologies such as Splunk or comparable platforms.
• Familiarity with IDS log analysis, packet capture, and network analysis tools.
• Knowledge of network and application protocols such as FTP, HTTP, SSH, and SMB.
• Strong analytical and problem-solving skills.
• Strong written and verbal communication skills.
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required.
• Ability to work in a hybrid environment in Rockville, Maryland.

This position offers a hybrid schedule, with time split between the office and remote work.