Associate SOC Analyst

What You'll Do:

• Monitor and analyze log data, network traffic, and/or alerts generated by a variety of security technologies in real-time.
• Respond, triage, and escalate security incidents using a SIEM platform following documented procedures.
• Support the execution of vulnerability scans and assist in analyzing results for remediation recommendations.
• Draft security incident reports detailing the threat, its characteristics, and required remediation activities for review by a senior analyst.
• Research new threats and ensure appropriate detection capabilities are in place.
• Review security incidents and other deliverables for adherence to established procedures and provide documentation updates as necessary.
• Contribute to the quality and timeliness of the security incident detection and classification service.
• Ensure standards and procedures are adhered to within defined SLA’s.
• Articulate security issues to customers, both verbally and written
• Referring difficult or complex issues to more experienced staff.
• Developing an understanding of current vulnerabilities, attacks, and countermeasures.
• Identify opportunities for process improvement and suggest them to stakeholders
• Manage and track customer issues and requests within a ticketing system.
• Work within a 24x7x365 team to further support the timely delivery of monitoring services.
• This position may be assigned to a rotating shift schedule.
• Support other teams as needed.

What You've Done:

• US Citizenship is Required
• 0-2 years of experience in an operational or technical environment, preferably with customer-facing responsibilities.
• Foundational understanding of core networking concepts including TCP/IP and common Internet protocols.
• Exposure to or basic understanding of an information/cyber security role, particularly in security monitoring and analysis.
• Familiarity with the cyber security threat landscape, including prevalent vulnerabilities and attack methods.
• Familiarity with security tools such as SIEM (Security Information and Event Management) platforms.
• Demonstrated technical and troubleshooting skills and the ability to adapt to solve new technical issues.
• General systems infrastructure knowledge (Windows/Linux OS).
• Strong verbal and written communication skills with a focus on clear and concise reporting.

Preferred Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Relevant entry-level certifications such as CompTIA Security+, CompTIA CySA+, or GIAC GSEC.
• Basic experience with scripting languages (e.g., Python, PowerShell) for task automation.
• Experience with ticketing/case management systems.
• A strong passion for cyber security, continuous learning, and knowledge sharing.