Tier 1 SOC Analyst

Role Summary

The CIOCC Tier 1 Analyst is responsible for monitoring and responding to security events and incidents using various security tools and data sources. This position requires a strong foundation in security operations, analytics, and incident triage within a SOC environment. The role involves analyzing alerts, conducting log analysis, and supporting the ongoing security posture of federal clients. It is suited for entry-level candidates with relevant lab experience, industry certifications, or recent academic backgrounds in cybersecurity.

Responsibilities

• Monitor and analyze security events from SIEM platforms, firewalls, IDS, IPS, endpoint solutions, and other data sources.
• Respond to security incidents by investigating alerts and identifying potential threats.
• Conduct log analysis, including IDS logs and packet captures, to support incident detection efforts.
• Maintain and update detection queries and rules within SIEM tools, such as Splunk.
• Collaborate with team members to ensure effective threat detection and response processes.
• Document security incidents and actions taken in accordance with company and client policies.
• Participate in shift work, including second and third shifts, to ensure 24/7 security coverage.
• Keep technical knowledge current with industry best practices and evolving threats.
• Support the implementation of security controls and respond to client inquiries related to security incidents.
• Assist in the development of security metrics, reports, and documentation for management and clients.

Qualifications

• 1-3 years of experience in a security operations center or a recent college graduate with industry certifications.
• Practical experience with SIEM tools, preferably Splunk or similar platforms.
• Knowledge of operating systems including Windows, Linux, and UNIX.
• Familiarity with security incident analysis, log analysis, and network protocols such as HTTP, SSH, SMB, FTP, and DAP.
• Excellent written and verbal communication skills to clearly articulate technical findings.
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required.
• Willingness to work second or third shift, with availability for hybrid onsite work in Rockville, MD.
• Relevant certifications such as Security+, CEH, CISSP, GCIH, or GCIA are preferred.
• Proactive attitude, strong problem-solving skills, and an eagerness to learn and grow within the cybersecurity field.

Publishing Pay Range: $25.00 - $30.00 hourly

This position is based in office and requires employee to work on-site.