Operations Technician II

About the role

Location: Herndon, VA (Onsite). Shift: Rotational / 24x7 Coverage as Required. We are seeking a motivated and detail-oriented SOC Analyst Level I to join our cybersecurity operations team. In this role, you will support continuous monitoring, detection, and initial response to security events across enterprise environments. You will work in a fast-paced, SLA-driven Security Operations Center (SOC), using tools such as Splunk (SIEM) and ServiceNow to help identify and manage security incidents. This position is ideal for individuals looking to build a strong foundation in cybersecurity operations within a structured and process-driven environment, with opportunities for growth and skill development. Everforth Apex is a world-class IT services company serving thousands of clients globally, valuing innovation, collaboration, and continuous learning, and recognized with awards such as ClearlyRated's Best of Staffing® in Talent Satisfaction (United States) and Great Place to Work® (United Kingdom and Mexico).

Responsibilities

• Monitor security events and alerts using Splunk SIEM to identify suspicious activity across network, endpoint, and cloud environments.
• Perform initial triage and investigation of alerts, following defined procedures to determine severity and required actions.
• Respond to security incidents in accordance with established SLAs, ensuring timely escalation and proper handling.
• Use ServiceNow to log, track, and document incidents, maintaining accurate records throughout the lifecycle.
• Conduct basic threat research to stay informed on emerging threats, vulnerabilities, and attacker techniques.
• Support incident analysis by identifying contributing factors and assisting with remediation recommendations.
• Collaborate with security engineering, and threat hunting to resolve incidents and strengthen security controls.
• Follow and contribute to standard operating procedures (SOPs) and playbooks to ensure consistent incident response.
• Communicate clearly with internal stakeholders regarding incident status and actions taken.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)
• Proficient understanding of SOC operations and the incident response lifecycle
• Familiarity with SIEM tool Splunk. Exposure to ServiceNow or similar ticketing systems
• Knowledge of networking fundamentals, security principles, and log analysis
• Strong analytical and problem-solving skills
• Ability to work in a 24x7 operational environment with strict SLA requirements
• Effective written and verbal communication skills

Preferred Qualifications

• Relevant certifications (e.g., CompTIA Security+, Splunk certifications)
• Familiarity with threat intelligence concepts or frameworks such as MITRE ATT&CK
• 2+ years of hands-on experience in security monitoring or incident response environments

Benefits

• Medical, dental, vision, life, disability, and other insurance plans
• ESPP (employee stock purchase program)
• 401K program with company match after 12 months of tenure
• HSA (Health Savings Account on the HDHP plan)
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions
• Corporate discount savings program and other discounts
• On-demand training program, access to certification prep and a library of technical and leadership courses/books/seminars after 6+ months of tenure
• Certification discounts and other perks to associations including CompTIA and IIBA
• Dedicated customer service team for consultants and certified Career Coach