Tier 1 Security Operations Center (SOC) Analyst - Secret or TS Clearance

Job Title: Tier 1 Security Operations Center (SOC) Analyst Location: Boulder, CO (100% on-site) Clearance Required: Active Secret or TS required Salary Range: $65K-$70K (based on experience) Application Deadline: November 30, 2026 To apply, please follow these steps: Visit https://ibsscorp.com/careersSelect the position you are interested inReview the job details, then click Apply NowComplete and submit your application Description The Security Operator I is an entry-level member of the Security Operations Center (SOC). The role provides continuous monitoring and first-tier triage of security events across the customer's enterprise. The Operator watches SIEM, EDR, IDS/IPS, and other security tool consoles, then evaluates the alerts against established playbooks and standard operating procedures. They separate false positives from true security events and escalate confirmed or suspected incidents to Tier 2 analysts and incident responders. The Operator documents each event in the ticketing system and keeps records accurate and complete. They also support the SOC's situational awareness by tracking investigation status, reporting findings, and helping educate users on security procedures. The role works under close supervision, may involve shift work as part of 24x7 coverage, and builds the foundational skills needed to advance to Tier 2 analysis. Key Responsibilities: Monitor SIEM, EDR, IDS/IPS, firewall, email security, and other security tool consoles in real time for events that may point to an incidentPerform initial triage of alerts using established playbooks and SOPs, and determine whether each is a false positive, benign activity, or a potential incidentEscalate validated or suspected incidents to Tier 2 analysts and incident response staff on time, with the supporting evidence attachedCreate, update, and close tickets in the case management system, with clear and accurate documentation of actions takenReview user-reported phishing emails and suspicious activity reports, and perform basic analysis of headers, URLs, and attachmentsConduct basic research on indicators of compromise (IPs, domains, file hashes) using threat intelligence sources and reputation toolsIdentify potential threats and respond to reported security violations under the direction of senior SOC staffHelp determine the causes of security events, and recommend improvements to monitoring rules and proceduresTrack the status of open investigations and contribute to shift turnover reports, daily summaries, and metrics reportingFollow incident handling, data handling, and chain-of-custody procedures in line with customer policy and NIST SP 800-61 guidanceAssist in educating users on security procedures and report suspicious trends to SOC leadershipMaintain awareness of current threats, vulnerabilities, and attacker techniques relevant to the customer environment Required Skills /Education/ Certifications & Qualifications: Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field0 to 2 years of experience in IT, security operations, network operations, or a related technical field (internships, labs, and military experience count)A DoD 8140/8570-compliant baseline certification at IAT Level II or higher (such as CompTIA Security+ CE), or the ability to obtain one within 6 months of hireFoundational knowledge of TCP/IP, common ports and protocols, DNS, and network architectureA working understanding of Windows and Linux operating systems and their logsFamiliarity with common attack types, including phishing, malware, brute force, and lateral movementBasic understanding of the incident response lifecycle and the MITRE ATT&CK frameworkStrong attention to detail and the ability to follow procedures consistentlyClear written and verbal communication skills for ticket documentation and escalationsWillingness to work rotating shifts, nights, weekends, and holidays as needed for 24x7 coverage Desired Skills: Hands-on experience with Microsoft Sentinel, SentinelOne, and Palo Alto XSOARExposure to EDR tools such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or SentinelOneAdditional certifications such as CompTIA CySA+, CompTIA Network+, GIAC GSEC, or Splunk Core Certified UserBasic scripting or query skills (PowerShell, Python, KQL, or SPL)Familiarity with packet analysis tools such as WiresharkExperience with ticketing and case management systems such as ServiceNow or JiraFamiliarity with federal security frameworks and guidance (NIST SP 800-53, NIST SP 800-61, FISMA)Experience in a SOC, NOC, or help desk environmentCompleted hands-on training platforms or labs (TryHackMe, Hack The Box, or similar) About IBSS Corp. Since 1992, IBSS, a woman-owned small business, has provided transformational consulting services to the Federal defense, civilian, and commercial sectors. Our services include cybersecurity and enterprise information technology, environmental science and engineering (including oceans, coasts, climate, and weather), and professional management services. Our approach is to serve our employees by investing in their growth and development. As a result, our employees bring greater capabilities and provide exceptional service to our clients. In addition to creating career development opportunities for our employees, IBSS is passionate about giving back to the community and serving the environment. We strive to leave something better behind for the next generation. We measure our success by the positive impact we have on our employees, clients, partners, and the communities we serve. Our tagline, Powered by Excellence, is a recognition of the employees that make up IBSS and ensures we deliver results with quality, applying industry best practices and certifications. IBSS offers a competitive benefits package that includes medical, dental, vision, and prescription drug coverage with a company-paid deductible, paid time off, federal holidays, a matching 401K plan, tuition/professional development reimbursement, and Flex-Spending (FSA)/Dependent Care Account (DCA) options. IBSS is an affirmative action and equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Click https://www.eeoc.gov/poster to see that the EEO is the law. Please direct any inquiries to the HR Department email at HR@ibsscorp.com. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to the Talent Acquisition Department at Recruiting@ibsscorp.com