Security Operations Center (SOC) Tier 1 Analyst

About the role

The Security Operations Center (SOC) provides 24x7x365 monitoring, detection, and response capabilities across enterprise environments. This includes event monitoring, cloud security monitoring, data loss prevention (DLP) monitoring, and participation in the incident response process. The Tier 1 SOC Analyst serves as the primary point of initial triage and investigation within the SOC. This role is responsible for proactively monitoring security alerts and incidents, conducting initial investigations to identify potential malicious activity, and escalating incidents in accordance with established procedures. The analyst works with senior cybersecurity personnel and cross-functional technology teams to support threat detection, response, and continuous improvement efforts.

Responsibilities

• Monitor security incidents and alerts across endpoint, network, and cloud environments through Security Information and Event Management (SIEM) tools and ticketing platforms.
• Perform initial triage and investigation of incidents assigned through the ticketing system, utilizing established playbooks and response procedures for specific incident types.
• Respond to, mitigate, and assist in the eradication of security threats under the guidance of Tier 2 and Tier 3 analysts and SOC leadership.
• Maintain accurate, consistent, and high-quality documentation of all actions taken during incident triage and investigations.
• Assist senior team members with the development and maintenance of SOC documentation and knowledge management resources.
• Handle sensitive information in accordance with established information protection policies and security standards.
• Collaborate with engineering and operations teams to troubleshoot issues, improve response processes, and enhance threat detection capabilities.

Qualifications

• Minimum Requirements: High School Diploma or GED, plus two (2) years of relevant and/or transferable experience.
• PREFERRED: Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related field.
• Experience: Two (2) years of relevant and/or transferable work experience.
• Preferred: Less than one (1) year of experience utilizing operating systems and industry-standard monitoring, logging, alerting, and investigation processes.
• Certifications: Foundational cybersecurity and/or IT certifications, including but not limited to: CompTIA Network+, CompTIA Security+, GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), GIAC Reverse Engineering Malware (GREM), GIAC Penetration Tester (GPEN).

Additional Responsibilities

Perform other duties and responsibilities as assigned.

Benefits

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.

Pay

$48-$53 per hour

Schedule

6 months +