SOC Analyst Junior

ASM Research • Remote,

2d

About The Position

Assists in ensuring the security of the DHMS program's information systems, networks, and data by monitoring, detecting, investigating, analyzing, and responding to cybersecurity incidents and implementing protective measures. Works with IT, operations, compliance, and risk management teams to support compliance with DHMS IT cybersecurity requirements, policies, and best practices. The role requires a foundational understanding of cybersecurity principles and training or experience with security tools, security assessments, mitigation strategies, and incident response. The analyst develops documentation and applies data security best practices, while demonstrating strong problem-solving, analytical, communication, interpersonal, and organizational skills. The position requires the ability to manage multiple tasks and work independently as well as collaboratively.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Entry-level experience in cybersecurity, systems security, or related IT security activities, consistent with the stated 0–3-year range; relevant training or supervised practical experience may support entry-level readiness.
• Foundational knowledge of cybersecurity principles, common attack methods, indicators of compromise, and safeguards supporting information confidentiality, integrity, and availability.
• Foundational ability to review security alerts and logs, follow incident response procedures, and recognize when findings require escalation to senior analysts.
• Strong analytical, problem-solving, written communication, and organizational skills, including the ability to document technical findings accurately and manage multiple assigned tasks.
• Must meet the position’s Secret security clearance requirement.
• Must be a U.S. citizen.

Nice To Haves

• Hands-on training or supervised experience using SIEM, firewall, intrusion detection and prevention, or endpoint security tools.
• Experience assisting with security assessments, mitigation verification, or incident documentation in a regulated IT environment.
• Familiarity with coordinating security activities across IT, operations, compliance, and risk management teams.

Responsibilities

• Monitor SIEM queues and alerts from firewalls, intrusion detection and prevention systems, and endpoint security tools to identify potentially suspicious activity.
• Perform initial alert triage by reviewing severity, affected assets, user activity, and supporting evidence to distinguish potential threats from false positives.
• Review and correlate network, endpoint, and authentication logs to identify suspicious patterns and establish preliminary incident scope and timelines.
• Follow incident response playbooks, perform authorized initial response actions, and escalate suspected or confirmed incidents with relevant evidence and clear investigation notes.
• Assist senior analysts with security assessments, documentation of identified weaknesses, and implementation and verification of approved mitigation measures.
• Maintain accurate incident records covering affected systems, indicators of compromise, investigative steps, response actions, and disposition while following sensitive-data handling requirements.
• Coordinate with IT, operations, compliance, and risk management teams to support security requirements, communicate findings, and track assigned corrective actions.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level