Information Security Analyst/SOC Analyst

Information Security Analyst/SOC Analyst

Location: Dover, DE 19904
Work Model: Hybrid Up to 3 days on-site per week
Duration: 8 months, 25 days
Interview: Microsoft Teams

Job Summary

We are seeking a motivated Information Security Analyst 1 / SOC Analyst to support security monitoring, threat detection, incident investigation, and response activities.

The ideal candidate will have hands-on experience with SIEM and EDR platforms, security alert triage, log analysis, incident response, and threat hunting. This role requires strong analytical and problem-solving skills and the ability to work effectively in a fast-paced cybersecurity environment.

Key Responsibilities

• Monitor network traffic, system logs, endpoints, and security tools to identify suspicious or malicious activity.
• Analyze and triage security alerts based on severity, risk, and potential business impact.
• Investigate security incidents including malware infections, unauthorized access, potential data breaches, and insider threats.
• Perform proactive threat hunting across SIEM and EDR platforms.
• Analyze logs from firewalls, IDS/IPS, antivirus, endpoints, authentication systems, and other security technologies.
• Support incident response activities, including containment, investigation, remediation, and recovery.
• Operate and monitor security technologies, including SIEM, EDR, IDS/IPS, firewalls, antivirus, and PKI solutions.
• Assist with basic digital forensics and incident investigations.
• Stay informed about emerging cybersecurity threats, vulnerabilities, attack techniques, and indicators of compromise.
• Develop or improve security detection rules and monitoring processes.
• Use Python and/or PowerShell to automate security-related tasks and investigations.
• Maintain accurate documentation of security incidents, investigations, and response activities.
• Collaborate with cybersecurity, infrastructure, networking, and other IT teams to resolve security issues.
• Contribute to continuous improvement of security operations and processes.

Required Skills

• Experience in a SOC, cybersecurity, information security, or security operations environment.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar technologies.
• Experience with EDR/endpoint security solutions such as CrowdStrike, Microsoft Defender, SentinelOne, or similar.
• Strong understanding of security monitoring, alert triage, and log analysis.
• Experience with incident detection and response.
• Knowledge of cybersecurity threats, vulnerabilities, attack patterns, and threat intelligence.
• Understanding of networking fundamentals, operating systems, and security protocols.
• Experience with IDS/IPS, firewalls, antivirus, and endpoint security technologies.
• Basic knowledge of computer forensics and incident investigation.
• Scripting experience with Python and/or PowerShell.
• Strong analytical, troubleshooting, communication, and problem-solving skills.

Education & Certifications

• Bachelor's degree or higher in Cybersecurity, Computer Science, Information Technology, or a related field.
• Previous professional experience in cybersecurity or information security.
• CompTIA Security+ or equivalent certification is preferred.

Preferred Qualifications

• Experience with threat hunting and detection engineering.
• Knowledge of the MITRE ATT&CK framework.
• Experience investigating malware and endpoint compromises.
• Familiarity with Windows and Linux security logs.
• Experience working with government or enterprise security environments.

Work Environment

This is a hybrid position based in Dover, Delaware, requiring onsite work up to 3 days per week. Candidates must be comfortable working in a security operations environment and participating in virtual interviews via Microsoft Teams.

Ideal Candidate:

The ideal candidate is a hands-on SOC/security professional who can effectively monitor security alerts, investigate suspicious activity, analyze logs, respond to incidents, and use SIEM/EDR technologies to identify and mitigate cybersecurity threats.