SOC Analyst

Position Overview

The Tier 1 Security Operations Center (SOC) Analyst contributes to the protection of client assets and information by monitoring security events and responding to incidents. The Tier 1 SOC Analyst will leverage their cybersecurity experience and knowledge to analyze SIEM/XDR/EDR alerts with a focus on root cause analysis. They will also collaborate with the SOC team to provide value‑added analysis of potential threats and make mitigation recommendations to the client.

The Tier 1 SOC Analyst will maintain knowledge of the current cyber‑threat landscape and the MITRE ATT&CK framework.

• Utilizes SIEM/XDR/EDR tools (Alien Vault USMA/Level Blue, Log Rhythm, Microsoft Sentinel, Splunk Crowd Strike, etc.) to monitor alerts and security events of client networks and systems.
• Identifies, analyzes, and responds to security incidents as they occur.
• Collaborates and leverages their cybersecurity knowledge working alongside a team of skilled analysts to address potential threats within a 24x7 SOC
• Crafts escalations to clients for potential threats that include value‑added and root cause analysis with recommendations for remediation
• Continually improves cybersecurity and information security expertise
• Performs other related duties as assigned

• Bachelor’s degree in Information Technology, Cybersecurity, or related field is preferred
• Basic knowledge of the following content areas is preferred:
  • IP addresses and subnetting
  • Common ports and services
  • IPv4 and IPv6 basic packet structure
  • HTTP methods (GET and POST)
  • DNS resolution
  • SSL / TLS and certificates
  • Common malware strategies (recon, exploit, callback)