MDR Analyst — Tier 1 Washington DC, Virginia, Maryland, or US Remote · Shift work View Role

Apsispoint; Washington (District of Columbia, MD); Remote; USD 60,000 - 90,000; Full time

Job summary

Apsispoint is seeking a Tier 1 MDR Analyst to join our 24/7 SOC. You will monitor customer environments, triage alerts across SIEM and XDR platforms, and help keep clients safe around the clock.

Work is rotation-based, including nights and weekends, with formal handovers and documentation in our ticketing system. The role emphasizes strong written communication and growing security knowledge, including Security+ or equivalent certification.

Qualifications

• 0–2 years in a SOC, IT, or security-adjacent role
• Strong fundamentals in networking and operating systems
• Ability to read security logs and alerts
• Willingness to work rotating shifts including nights and weekends
• Security+ certification or actively pursuing

Responsibilities

• Monitor 24/7 security alerts across SIEM/EDR tooling
• Triage and prioritize alerts; filter false positives
• Investigate and enrich with threat intel and playbooks
• Escalate incidents to Tier 2 with documentation
• Refine standard operating procedures and response playbooks
• Maintain shift handovers and case notes

Skills

SOC experience

Networking basics

Operating systems basics

SIEM concepts

Read security logs/alerts

Shift work readiness

Written communication

Security+ (cert)

KQL

PowerShell

Python

Education

Security+ or equivalent certification

Microsoft SC-200 certification

Tools

Microsoft Sentinel

Job description

Washington DC, Virginia, Maryland, or US Remote · Shift work Full-time

About the Role

You are the front line of our 24/7 SOC. As a Tier 1 MDR Analyst you monitor customer environments, triage incoming alerts across SIEM and XDR platforms, and keeping our clients safe around the clock.

What You'll Do

• Monitor security alerts 24/7 across Microsoft Sentinel, Defender XDR, and other SIEM/EDR tooling
• Triage and prioritize alerts, filtering false positives from genuine threats
• Perform initial investigation and enrichment using threat intelligence and internal playbooks
• Escalate confirmed or ambiguous incidents to Tier 2 with complete, accurate documentation
• Follow and help refine standard operating procedures and response playbooks
• Maintain clear shift handovers and case notes in the ticketing system

What You'll Bring

• 0–2 years in a SOC, IT, or security-adjacent role (new grads with strong fundamentals welcome)
• Solid understanding of networking, operating systems, and common attack techniques
• Familiarity with SIEM concepts and reading security logs/alerts
• Willingness to work rotating shifts, including nights and weekends
• Strong written communication and attention to detail
• Security+ (or equivalent) or actively pursuing certification

Nice to Have

• Microsoft SC-200 certification
• Exposure to KQL (Kusto Query Language)
• Basic scripting (PowerShell or Python)

Apsispoint is an equal opportunity employer committed to building a diverse and inclusive team.