SOC Analyst / Tier 1

The Tier 1 SOC Analyst has the primary responsibility of monitoring and responding to alerts and notifications triggered in the SIEM tool and Endpoint Protection dashboard, as well as responding to direct client requests for assistance. The Tier 1 SOC Analyst will analyze and triage advanced endpoint protection real-time events and perform Tier 1 incident response and remediation. The analyst will escalate advanced security incidents to Tier 2 SOC analysts and ensure correctness of incident and event detections in service requests. The Tier 1 SOC analyst will report to SOC Manager and/or senior analyst on shift.

The Tier 1 SOC Analyst requires 2-4 years of network intrusion experience or network security operations. The analyst needs the ability to interpret and evaluate incidents and events as reported by the SIEM tool and/or Endpoint Protection dashboard. The ability to communicate technical concepts and narrative clearly both orally and in writing is required. Fundamental understanding of network and security principles and concepts required.

Experience in performing intrusion detection analytics working with the examination of logs and dashboard events is preferred.

2-4 years of SOC/NOC experience is a good baseline. We are hard chargers so if you have the skills, we’re listening. Firewall blacklisting and whitelisting operations experience is a plus. Associate degree or above preferred, or equivalent experience in a NOC/SOC environment. Military/government experience is acceptable, and Veterans are encouraged to apply.

Certifications: CompTIA Security+, CASP, or CCNA Security preferred.