Your role and responsibilities
- Monitor security alerts using SIEM and EDR tools to identify suspicious activity.
- Perform initial analysis and triage of security incidents.
- Escalate complex issues to Tier 2 and Tier 3 SOC Analysts.
- Maintain detailed incident logs and reports.
- Ensure compliance with Standard Operating Procedures (SOPs) for incident response.
- Provide real-time monitoring and initial incident response for security events.This job can be performed from anywhere in the US .
Required education
Bachelor's Degree
Preferred education
Master's Degree
Required technical and professional expertise
- Ability to obtain and maintain a Federal Security clearance with the US Government.
- CompTIA Security+ certification.
- Exposure to IT security or network operations.
- Familiarity with SIEM and EDR tools, with a particular focus on Splunk.
- Basic understanding of security concepts such as firewalls, IDS/IPS, malware analysis, and incident response.
Preferred technical and professional experience
- Experience working in a 24x7 SOC environment.
- Familiarity with SOAR tools and automation.
- Exposure to FedRAMP compliance and NIST guidelines.
- Network+ or other relevant security certifications.
- Experience leveraging Splunk as a SIEM for a cloud-hosted environment.
