Tier 1 SOC Analyst
Apex Systems · Rockville, MD · 3 wk ago
Information TechnologyContract
We need to output only HTML fragment, no html/body tags, no markdown fences. Use for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Include sections only if posting has real specific content. Remove boilerplate, navigation, legal, EEO, etc. Also remove job ID, application instructions, etc.
We need to preserve all substantive information. Let's parse the job description.
Job#: 3053368 (ignore). Job Description: If interested, please send most updated resume to [email protected] (application instruction, remove). Tier 1 SOC Analyst Location: Rockville, Maryland (Onsite) Role Overview We are seeking a Tier 1 SOC Analyst responsible for analyzing and responding to security events and incidents. This role involves monitoring various data sources such as SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, and Network Access Control (NAC) to protect client infrastructure.
Key Responsibilities Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and other data sources. Monitor security tools and systems for potential threats. Communicate technical details clearly through written and verbal reports.
Required Qualifications Experience: 1-3 years in a security operations center environment or a recent college graduate with industry certifications. Experience with a variety of operating systems, including Windows, Linux, or UNIX in a functional capacity. Technical Skills: Experience with Splunk or a similar SIEM tool. Familiarity with the Word application is required. Other Requirements: Must be a US Citizen. Excellent written and verbal communication skills are required. Candidates should be available for second shift (12:00 PM - 10:00 PM) or third shift (8:00 PM - 6:00 AM) depending on staffing needs.
Preferred Qualifications One or more of the following certifications: CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN. IDS Log analysis skills. Experience with packet capture tools and analysis. Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP).
Then company description: Everforth Apex is a world-class IT services company... (some fluff). Benefits overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.
Then EEO boilerplate etc. Remove.
We need sections: About the role (role overview), Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We need to decide what content goes where.
- About the role: Role Overview paragraph.
- Responsibilities: Key Responsibilities bullet list.
- Requirements: maybe Required Qualifications? The posting has "Required Qualifications" and "Other Requirements". Could combine.
- Qualifications: Preferred Qualifications.
- Skills: Technical Skills maybe.
- Benefits: Benefits overview.
- Pay: Not mentioned. No pay info. So we should NOT include Pay section.
- Schedule: shift availability mentioned: Candidates should be available for second shift (12:00 PM - 10:00 PM) or third shift (8:00 PM - 6:00 AM) depending on staffing needs. That's schedule info. So we can include Schedule section.
We must not include sections with filler like "commensurate with experience". Not relevant.
We need to preserve all substantive info. Let's extract.
About the role: "We are seeking a Tier 1 SOC Analyst responsible for analyzing and responding to security events and incidents. This role involves monitoring various data sources such as SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, and Network Access Control (NAC) to protect client infrastructure."
Responsibilities: list items:
- Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and other data sources.
- Monitor security tools and systems for potential threats.
- Communicate technical details clearly through written and verbal reports.
Requirements: Required Qualifications:
- Experience: 1-3 years in a security operations center environment or a recent college graduate with industry certifications.
- Experience with a variety of operating systems, including Windows, Linux, or UNIX in a functional capacity.
- Technical Skills: Experience with Splunk or a similar SIEM tool.
- Familiarity with the Word application is required.
- Other Requirements: Must be a US Citizen.
- Excellent written and verbal communication skills are required.
We could combine "Other Requirements" as part of Requirements.
Qualifications (Preferred):
- One or more of the following certifications: CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN.
- IDS Log analysis skills.
- Experience with packet capture tools and analysis.
- Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP).
Skills: maybe we already covered technical skills; but we could separate "Technical Skills" as Skills section: Experience with Splunk or similar SIEM tool; Familiarity with Word application.
But we already placed Technical Skills under Requirements. Might be duplication. Better to follow instruction: Use sections as appropriate. Could have Skills section for technical skills, and Requirements for experience/education/certifications etc. Let's decide.
We have Required Qualifications (experience, OS, etc). Preferred Qualifications (certifications, IDS log analysis, packet capture, protocols). Skills: maybe "Experience with Splunk or a similar SIEM tool. Familiarity with the Word application is required." That is technical skill.
Thus:
- About the role: role overview paragraph.
- Responsibilities: bullet list.
- Requirements: experience, OS, US citizenship, communication skills, shift availability? Actually shift availability is schedule.
- Qualifications: preferred certifications, IDS log analysis, packet capture, protocol knowledge.
- Skills: Splunk/SIEM experience, Word familiarity.
- Benefits: benefits overview paragraph(s).
- Schedule: shift availability.
We must not repeat job title as heading. Already not.
We must not include Pay section.
Now produce HTML fragment: use
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Include sections only if posting has real specific content. Remove boilerplate, navigation, legal, EEO, etc. Also remove job ID, application instructions, etc.
We need to preserve all substantive information. Let's parse the job description.
Job#: 3053368 (ignore). Job Description: If interested, please send most updated resume to [email protected] (application instruction, remove). Tier 1 SOC Analyst Location: Rockville, Maryland (Onsite) Role Overview We are seeking a Tier 1 SOC Analyst responsible for analyzing and responding to security events and incidents. This role involves monitoring various data sources such as SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, and Network Access Control (NAC) to protect client infrastructure.
Key Responsibilities Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and other data sources. Monitor security tools and systems for potential threats. Communicate technical details clearly through written and verbal reports.
Required Qualifications Experience: 1-3 years in a security operations center environment or a recent college graduate with industry certifications. Experience with a variety of operating systems, including Windows, Linux, or UNIX in a functional capacity. Technical Skills: Experience with Splunk or a similar SIEM tool. Familiarity with the Word application is required. Other Requirements: Must be a US Citizen. Excellent written and verbal communication skills are required. Candidates should be available for second shift (12:00 PM - 10:00 PM) or third shift (8:00 PM - 6:00 AM) depending on staffing needs.
Preferred Qualifications One or more of the following certifications: CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN. IDS Log analysis skills. Experience with packet capture tools and analysis. Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP).
Then company description: Everforth Apex is a world-class IT services company... (some fluff). Benefits overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.
Then EEO boilerplate etc. Remove.
We need sections: About the role (role overview), Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We need to decide what content goes where.
- About the role: Role Overview paragraph.
- Responsibilities: Key Responsibilities bullet list.
- Requirements: maybe Required Qualifications? The posting has "Required Qualifications" and "Other Requirements". Could combine.
- Qualifications: Preferred Qualifications.
- Skills: Technical Skills maybe.
- Benefits: Benefits overview.
- Pay: Not mentioned. No pay info. So we should NOT include Pay section.
- Schedule: shift availability mentioned: Candidates should be available for second shift (12:00 PM - 10:00 PM) or third shift (8:00 PM - 6:00 AM) depending on staffing needs. That's schedule info. So we can include Schedule section.
We must not include sections with filler like "commensurate with experience". Not relevant.
We need to preserve all substantive info. Let's extract.
About the role: "We are seeking a Tier 1 SOC Analyst responsible for analyzing and responding to security events and incidents. This role involves monitoring various data sources such as SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, and Network Access Control (NAC) to protect client infrastructure."
Responsibilities: list items:
- Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and other data sources.
- Monitor security tools and systems for potential threats.
- Communicate technical details clearly through written and verbal reports.
Requirements: Required Qualifications:
- Experience: 1-3 years in a security operations center environment or a recent college graduate with industry certifications.
- Experience with a variety of operating systems, including Windows, Linux, or UNIX in a functional capacity.
- Technical Skills: Experience with Splunk or a similar SIEM tool.
- Familiarity with the Word application is required.
- Other Requirements: Must be a US Citizen.
- Excellent written and verbal communication skills are required.
We could combine "Other Requirements" as part of Requirements.
Qualifications (Preferred):
- One or more of the following certifications: CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN.
- IDS Log analysis skills.
- Experience with packet capture tools and analysis.
- Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP).
Skills: maybe we already covered technical skills; but we could separate "Technical Skills" as Skills section: Experience with Splunk or similar SIEM tool; Familiarity with Word application.
But we already placed Technical Skills under Requirements. Might be duplication. Better to follow instruction: Use sections as appropriate. Could have Skills section for technical skills, and Requirements for experience/education/certifications etc. Let's decide.
We have Required Qualifications (experience, OS, etc). Preferred Qualifications (certifications, IDS log analysis, packet capture, protocols). Skills: maybe "Experience with Splunk or a similar SIEM tool. Familiarity with the Word application is required." That is technical skill.
Thus:
- About the role: role overview paragraph.
- Responsibilities: bullet list.
- Requirements: experience, OS, US citizenship, communication skills, shift availability? Actually shift availability is schedule.
- Qualifications: preferred certifications, IDS log analysis, packet capture, protocol knowledge.
- Skills: Splunk/SIEM experience, Word familiarity.
- Benefits: benefits overview paragraph(s).
- Schedule: shift availability.
We must not repeat job title as heading. Already not.
We must not include Pay section.
Now produce HTML fragment: use for each section heading, then content:
for prose,
- for lists.
We need to ensure we don't include boilerplate like EEO, navigation, etc.
Let's craft.
Section About the role:
About the role
We are seeking a Tier 1 SOC Analyst responsible for analyzing and responding to security events and incidents. This role involves monitoring various data sources such as SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, and Network Access Control (NAC) to protect client infrastructure.
Responsibilities:Responsibilities
- Analyze and respond to security events and incidents from SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and other data sources.
- Monitor security tools and systems for potential threats.
- Communicate technical details clearly through written and verbal reports.
Requirements
- 1-3 years in a security operations center environment or a recent college graduate with industry certifications.
- Experience with a variety of operating systems, including Windows, Linux, or UNIX in a functional capacity.
- Must be a US Citizen.
- Excellent written and verbal communication skills are required.
Qualifications
- One or more of the following certifications: CSIS, CEH, CSTA, CSTP, GCFE, CISSP, GCIH, GCIA, GPEN.
- IDS Log analysis skills.
- Experience with packet capture tools and analysis.
- Knowledge of well-known protocols and services (FTP, HTTP, SSH, SMB, DAP).
Skills
- Experience with Splunk or a similar SIEM tool.
- Familiarity with the Word application is required.
or multiple
. Use
for prose. Benefits overview paragraph: "Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide." We'll put that in a
. Schedule:
Schedule
Candidates should be available for second shift (12:00 PM - 10:00 PM) or third shift (8:00 PM - 6:00 AM) depending on staffing needs.
Now ensure we didn't include any boilerplate. Also we removed job ID, application instructions, location? Location is Rockville, Maryland (Onsite). Should we include location? It's substantive. Where to put? Could be part of About the role or maybe a separate section? There's no specific heading for location; we could include it in About the role paragraph. Add location after role overview: "Location: Rockville, Maryland (Onsite)". Let's incorporate. Thus About the role paragraph: "We are seeking a Tier 1 SOC Analyst responsible for analyzing and responding to security events and incidents. This role involves monitoring various data sources such as SIEM, Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Endpoint Security Solutions, and Network Access Control (NA