Level 1 SOC Analyst

Defendify • Portland, ME

3d • Onsite

About The Position

Stand watch over the customers who count on us and turn suspicious activity into fast, informed action. We're looking for a curious, attention to detail-oriented Level 1 SOC Analyst to join Defendify's Security Operations Center team. You'll monitor and triage cybersecurity alerts, investigate suspicious activity, document what you find, and quickly escalate incidents that require deeper analysis or response. This is a full-time third shift, primarily in-office role at our Portland Maine headquarters. Because our Security Operations Center supports customers around the clock, alternating shift work may be required. Defendify helps small and midsized organizations build stronger cybersecurity without managing a collection of segregated products and providers. Our All-In-One Cybersecurity platform brings together 13 modules across assessment and testing, policies and training, and detection and response. As a Level 1 SOC Analyst, you'll help watch over customer environments 24/7. You'll serve as the first line of human analysis, reviewing signals, gathering context, deciding whether activity is benign or suspicious, and making sure potential threats reach the right people with useful information. You'll work from established playbooks, learn from experienced security professionals, and build the judgment and communication skills needed to progress in security operations.

Requirements

• An associate's or bachelor's degree in cybersecurity, information technology, computer science, or a related field, or equivalent hands-on training and experience
• Understand core cybersecurity concepts, common threats, and attack techniques
• Familiarity with technologies such as SIEM platforms, endpoint protection, IDS or IPS, firewalls, and antivirus tools
• Understand networking fundamentals, including TCP/IP, DNS, and HTTP/S
• Ability to analyze logs and alerts, identify meaningful patterns, and recognize when an issue should be escalated
• Ability to write clearly, communicate calmly, and pay close attention to details
• Comfortable following defined procedures while asking thoughtful questions when the evidence does not fit the playbook
• Ability to work effectively in a 24/7 operational environment where shift work may be required

Nice To Haves

• Hold a relevant certification such as CompTIA Security+, Network+ or CySA+, or are actively working toward one; certifications are a plus, not a requirement

Responsibilities

• Monitor and triage cybersecurity alerts and events across customer environments
• Review logs and available context to identify suspicious patterns, false positives, and activity that requires deeper investigation
• Document findings, dispositions, and supporting evidence clearly and consistently in each case
• Escalate incidents promptly and accurately according to established procedures and severity criteria
• Support clean shift handoffs so active investigations and customer-impacting issues continue without losing context
• Collaborate with senior analysts and security leaders during investigations and incident response
• Follow operational playbooks while identifying opportunities to improve alert handling, documentation, and team workflows
• Continue building knowledge of threats, attack techniques, security tools, and customer environments

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree