SOC Analyst

Our client, a Communications company, is looking for a SOC Analyst for their Herndon, VA location.


Responsibilities:

• Work in a fast-paced, SLA-driven Security Operations Center (SOC), using tools such as Splunk (SIEM) and ServiceNow to help identify and manage security incidents.
• This position is ideal for individuals looking to build a strong foundation in cybersecurity operations within a structured and process-driven environment, with opportunities for growth and skill development.
• Monitor security events and alerts using Splunk SIEM to identify suspicious activity across network, endpoint, and cloud environments.
• Perform initial triage and investigation of alerts, following defined procedures to determine severity and required actions.
• Respond to security incidents in accordance with established SLAs, ensuring timely escalation and proper handling.
• Use ServiceNow to log, track, and document incidents, maintaining accurate records throughout the lifecycle.
• Conduct basic threat research to stay informed on emerging threats, vulnerabilities, and attacker techniques.
• Support incident analysis by identifying contributing factors and assisting with remediation recommendations.
• Collaborate with security engineering, and threat hunting to resolve incidents and strengthen security controls.
• Follow and contribute to standard operating procedures (SOPs) and playbooks to ensure consistent incident response.
• Communicate clearly with internal stakeholders regarding incident status and actions taken.
• Support day-to-day operational activities within the team
• Perform technical and operational tasks aligned with business needs
• Work may involve hands-on operational support, troubleshooting, and maintenance-type responsibilities (inferred based on role title)

• Seeking a motivated and detail-oriented SOC Analyst Level I to join our cybersecurity operations team. In this role, you will support continuous monitoring, detection, and initial response to security events across enterprise environments.
• Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)
• Proficient understanding of SOC operations and the incident response lifecycle
• Familiarity with SIEM tool Splunk.
• Exposure to ServiceNow or similar ticketing systems
• Knowledge of networking fundamentals, security principles, and log analysis
• Strong analytical and problem-solving skills
• Ability to work in a 24x7 operational environment with strict SLA requirements
• Effective written and verbal communication skills
• Relevant certifications (e.g., CompTIA Security+, Splunk certifications)
• Familiarity with threat intelligence concepts or frameworks such as MITRE ATT&CK
• 2+ years of hands-on experience in security monitoring or incident response environments
• Candidates should be able to operate independently and contribute to ongoing operations
• Hands-on operational/technical environment involving troubleshooting, maintenance, and use of internal systems/tools in a structured, process-driven setting. Likely includes infrastructure/network-related support
• Team-oriented, fast-paced operational environment focused on safety, reliability, and collaboration, with a mix of independent work and team support
• A typical day includes reviewing work orders, performing hands-on troubleshooting and maintenance, monitoring systems, responding to issues, and documenting work while collaborating with the team
• Ramp-up includes onboarding and training in the first 1-2 weeks, with increasing independence over the first 30 days and full productivity expected within 30-60 days
• Must-Have Tools
• Splunk (Required):
• Hands-on experience with Splunk SIEM is mandatory; ~90% of the work will be performed within Splunk
• Candidates should have practical experience and/or Splunk certification

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities