Security Operations Center Analyst I

Description

We are looking for a Security Operations Center Analyst I to join a national managed security services provider. In this role, you will monitor and triage security alerts across client environments, support vulnerability management, and grow your SOC career with hands-on mentorship from senior analysts. This is a fully remote, US-based position.

Requirements

• US-based
• 0–2 years of experience in a SOC, help desk, or security-adjacent role
• Familiarity with SIEM concepts (Rapid7 InsightIDR a plus)
• Basic knowledge of vulnerability management (Rapid7 InsightVM a plus)
• Foundational understanding of MITRE ATT&CK framework
• Strong written and verbal communication skills
• Own computer and proper remote work setup (reliable internet, quiet workspace)

Responsibilities

• Monitor and triage security alerts across managed client environments
• Perform Tier 1 analysis and escalate complex events to Tier 2/3 analysts
• Support vulnerability scanning and remediation tracking
• Investigate email-based threats including phishing and spoofing
• Contribute to SOC runbooks, playbooks, and internal documentation

Nice to have

• Security+, Network+, or ISC2 CC certification
• Exposure to SOAR platforms and automated playbook concepts
• Basic scripting skills (Python, PowerShell, or Bash)
• Familiarity with cloud environments (Azure, AWS, or GCP)

Working conditions

• Remote, US-based
• Monday–Friday, 10:30 AM–6:30 PM EST
• Float/flex shift coverage required
• PTOs
• 5 days sick leave per year
• Health and internet stipend provided