Tier 1 SOC Analyst

Role Summary

The CIOCC Tier 1 Analyst is responsible for monitoring and responding to security events and incidents using various security tools and data sources. This position requires a foundational understanding of security operations, analytics, and incident triage within a Security Operations Center (SOC) environment.

The role involves analyzing alerts, conducting log analysis, and supporting the ongoing security posture of federal clients. This entry-level opportunity is designed for candidates with relevant hands-on or lab experience, industry certifications, cybersecurity coursework, or an academic background in cybersecurity or a related field.

Responsibilities

• Monitor and analyze security events from SIEM platforms, firewalls, IDS/IPS, endpoint security solutions, and other data sources.
• Respond to security incidents by investigating alerts and identifying potential threats.
• Conduct log analysis, including review of IDS logs and packet captures, to support incident detection and response efforts.
• Maintain and update detection queries and rules within SIEM tools such as Splunk.
• Collaborate with team members to support effective threat detection and response processes.
• Document security incidents and actions taken in accordance with company and client policies.
• Participate in scheduled shift work, including second and third shifts, to support 24/7 security coverage.
• Maintain current knowledge of cybersecurity best practices, technologies, and evolving threats.
• Support the implementation of security controls and respond to client inquiries related to security incidents.
• Assist in developing security metrics, reports, and documentation for management and clients.

Qualifications

• Relevant experience or practical exposure to security operations, cybersecurity, or a related technical environment. Experience may include professional experience, internships, cybersecurity labs, academic projects, or other hands-on training.
• Practical experience or familiarity with SIEM tools, preferably Splunk or similar platforms.
• Knowledge of operating systems, including Windows, Linux, and UNIX.
• Familiarity with security incident analysis, log analysis, and network protocols such as HTTP, SSH, SMB, FTP, and DAP.
• Strong written and verbal communication skills, with the ability to clearly communicate technical findings.
• This position supports a U.S. Government contract and requires eligibility to obtain and maintain the security clearance required for the role. U.S. citizenship is required where mandated by the applicable government contract or security clearance requirements.
• Ability and willingness to work second or third shift and to work on-site in Rockville, Maryland.
• Relevant cybersecurity certifications, such as Security+, CEH, CISSP, GCIH, or GCIA, are preferred but not required.
• Strong problem-solving skills, initiative, and a willingness to continue learning and developing within the cybersecurity field.

Pay Range: $25.00–$30.00 per hour

This position is based in Rockville, Maryland, and requires on-site work.