SOC Technician (GTA)

Georgia Department of Revenue • Atlanta, GA

5d • $53,100 - $67,700 • Hybrid

About The Position

The Georgia Technology Authority (GTA) is seeking a SOC Technician in the Office of Information Security. The GTA manages IT infrastructure services for 89 Executive Branch agencies and managed network services for over 1,200 state and local government entities. This is an entry-level cybersecurity position focused on monitoring and protecting enterprise information systems. Under the guidance of senior staff, the Technician will learn security operations processes, monitor security tools, document security events, and perform initial alert reviews while developing foundational cybersecurity skills.

Requirements

• Basic knowledge of Security Operations Center (SOC) principles, terminology, common cybersecurity threats, and information technology concepts, gained through technical training, internship, military technical experience, or other relevant experience.
• Possess, or obtain within 12 months of hire, one of the following certifications: CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Cisco Certified CyberOps Associate, SANS SEC450 / GSOC.
• Ability to work outside of core business hours and travel throughout the State of Georgia to support incident response activities.
• Ability to work effectively in restricted environments with limited connectivity.
• Ability to successfully complete required Georgia Bureau of Investigation (GBI) and Federal Bureau of Investigation (FBI) background investigations for work within the State of Georgia enterprise SOC.
• Executes assigned duties with precision, a commitment to quality standards, and the ability to work independently as proficiency develops.
• Ability to follow documented procedures.
• Strong interpersonal and communication skills with the ability to collaborate effectively across technical and business teams.
• Ability to evaluate security alerts, recognize unusual activity, and escalate potential threats in accordance with established procedures.
• Ability to work in a fast-paced operational environment.
• Willingness to continuously learn new technologies and adapt to evolving cyber threats.
• Good understanding of computer networks, operating systems, and cybersecurity principles.

Nice To Haves

• Associate degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Network Administration, or a related field with one (1) year of experience in cybersecurity roles within SOC operations or incident response.
• Experience using Windows, Active Directory, or Linux.
• Good understanding of networking concepts (TCP/IP, DNS, HTTP, VPN).
• Familiarity with SIEM, EDR, or vulnerability management tools through coursework, labs, internships, or home labs.
• Experience participating in Capture the Flag (CTF), cyber competitions, or home lab environments.
• Basic scripting knowledge (PowerShell or Python).
• Strong customer service or technical support experience.

Responsibilities

• Monitor security dashboards and security monitoring tools for potential alerts.
• Review and document security events following established procedures.
• Escalate suspicious activity to SOC Analysts for further investigation.
• Assist with maintaining incident documentation and case records.
• Learn and follow SOC standard operating procedures and playbooks.
• Participate in security meetings and daily operational briefings.
• Maintain accurate documentation within ServiceNow or incident management systems.
• Participate in cybersecurity training, tabletop exercises, and skill development.
• Perform other duties as assigned.

Benefits

• employee retirement plan
• paid holidays annually
• vacation and sick leave
• health, dental, vision, legal, disability, accidental death and dismemberment, health and childcare spending account
• telework opportunities depending upon position

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree