SOC Analyst Tier 1

About the role

We are seeking a SOC Analyst Tier 1 to serve as the first line of defense in our operations center. This role involves monitoring SIEM and security tooling dashboards, triaging incoming calls and alerts, creating and routing incident tickets, and escalating confirmed or suspected threats to Tier 2.

Responsibilities

• Maintain SIEM dashboards and security tooling alerts
• Triage all incoming customer calls, alerts, emails, and tickets using established playbooks
• Create detailed tickets for all confirmed or suspected events
• Perform initial investigation steps such as IP lookups, hash lookups, and IOC correlation
• Escalate threats exceeding Tier 1 response authority to Tier 2 within established guidelines
• Contribute to playbook improvements by flagging outdated or incorrect procedures
• Participate in briefings and training sessions
• Maintain the SOC Event log for all events during the shift
• Maintain situational awareness of the threat landscape and active campaigns

Requirements

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, Information Security, or related field, or 2+ years of experience in a SOC, NOC, IT security, or network operations role
• One of the following certifications, equivalent or better: Sec+, CYSA+, GSEC; or the ability to obtain the certification within 60 days
• Basic understanding of networking and security concepts
• Basic understanding of SIEM platforms and log analysis
• Ability to work shifts including nights, weekends, and holidays on a rotating schedule

Qualifications

• Preferred: Active Secret clearance
• Preferred: Understanding of MITRE ATT&CK framework
• Preferred: Experience with ticketing systems (ServiceNow, Jira, or equivalent)