SOC Analyst I

What you'll do

• Analyze and process security alerts from enterprise tools to identify malicious activity.
• Conduct thorough security investigations and gather operational response data with senior analysts.
• Author comprehensive case documentation detailing threat scope, risk impact, and remediation steps.
• Monitor security event feeds across endpoints, firewalls, and intrusion detection systems.
• Provide insights to refine detection playbooks, alert tuning, and orchestration.
• Perform incident triage within Windows and Linux environments using command line tools.
• Interpret scripts to identify malicious code patterns.
• Deliver onsite security monitoring for managed detection and response services.

What we're looking for

• Bachelor's Degree in Computer Science, Information Technology, or Information Security, or 1+ year of experience in security operations/cybersecurity.
• Proficiency in security concepts including networking fundamentals, process analysis, and risk management principles.
• Experience with SIEM tools to analyze log sources across firewalls, IDS/IPS, and EDR platforms.
• Command line proficiency for navigating Windows and Linux environments during incident triage.
• Ability to read and interpret basic scripts to identify malicious code patterns.
• Strong communication skills to deliver clear technical information in both written and verbal forms.
• Availability to work night shifts to support operational requirements.
• Must be a U.S. citizen who can pass a stringent fingerprint background check for CJIS compliance.
• Active CompTIA Security+, Network+, or baseline industry certification (preferred).