SOC Analyst Level I

TekWissen • Herndon, VA

7d • Onsite

About The Position

We are seeking a motivated and detail-oriented SOC Analyst Level I to join our cybersecurity operations team. In this role, you will support continuous monitoring, detection, and initial response to security events across enterprise environments. You will work in a fast-paced, SLA-driven Security Operations Center (SOC), using tools such as Splunk (SIEM) and ServiceNow to help identify and manage security incidents. This position is ideal for individuals looking to build a strong foundation in cybersecurity operations within a structured and process-driven environment, with opportunities for growth and skill development.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
• Proficient understanding of SOC operations and the incident response lifecycle.
• Familiarity with SIEM tool Splunk.
• Exposure to ServiceNow or similar ticketing systems.
• Knowledge of networking fundamentals, security principles, and log analysis.
• Strong analytical and problem-solving skills.
• Ability to work in a 24x7 operational environment with strict SLA requirements.
• Effective written and verbal communication skills.

Nice To Haves

• Relevant certifications (e.g., CompTIA Security+, Splunk certifications).
• Familiarity with threat intelligence concepts or frameworks such as MITRE ATT&CK.
• 2+ years of hands-on experience in security monitoring or incident response environments.

Responsibilities

• Monitor security events and alerts using Splunk SIEM to identify suspicious activity across network, endpoint, and cloud environments.
• Perform initial triage and investigation of alerts, following defined procedures to determine severity and required actions.
• Respond to security incidents in accordance with established SLAs, ensuring timely escalation and proper handling.
• Use ServiceNow to log, track, and document incidents, maintaining accurate records throughout the lifecycle.
• Conduct basic threat research to stay informed on emerging threats, vulnerabilities, and attacker techniques.
• Support incident analysis by identifying contributing factors and assisting with remediation recommendations.
• Collaborate with security engineering, and threat hunting to resolve incidents and strengthen security controls.
• Follow and contribute to standard operating procedures (SOPs) and playbooks to ensure consistent incident response.
• Communicate clearly with internal stakeholders regarding incident status and actions taken.

What This Job Offers

• Career Level: Entry Level