Tier I SOC Analyst

CGI•Knoxville, TN

1d•Hybrid

About The Position

CGI Federal is expanding its Security Operations Center (SOC) capabilities in Knoxville, TN. As cyber threats become more advanced, our analysts play a critical role in protecting federal systems and sensitive information. This role is ideal for someone early in their cybersecurity journey who is looking to build hands-on skills and progress into more specialized areas whether in threat intelligence, automation, incident response or cloud security. You will gain broad exposure to tools, technologies and real-world incidents, with support from experienced analysts and clear pathways to grow your career in cyber. This position is located in our Knoxville, TN office; however, a hybrid working model is acceptable.

Requirements

Exposure to cybersecurity, information security, or information technology.
Understanding of network fundamentals, Windows/Linux systems and security tools
Excellent verbal and written communication skills.
Ability to remain calm and effective in a fast-paced, team-oriented environment.
Demonstrated analytical and problem-solving skills.
US Citizenship, with eligibility to obtain a public trust clearance.
BA/BS or equivalent IT industry experience (2+ years)

Nice To Haves

Experience or exposure to SOC monitoring, incident response or threat analysis.
Exposure or experience with one or more programming languages, such as python, JavaScript
Security certifications such as Security+, CySA+, SC-200

Responsibilities

Monitor and triage security events using playbooks, SIEM tools, and case management systems.
Respond to alerts, identify false positives, and escalate incidents for deeper analysis and resolution.
Collaborate with senior analysts and subject matter experts to resolve incidents and enhance detection capabilities.
Incident Documentation: Logging detailed findings of investigations in a ticketing system for tracking and reporting.
Escalation: Escalating valid, complex, or high-severity security incidents to Tier 2 analysts.
Gathering context on alerts (e.g., threat intelligence, user information, endpoint data) to aid in analysis.
Security Tool Operation: Navigating tools like EDR (Endpoint Detection and Response), SIEM (Security Information and Event Management), and firewalls