Security Operations Center (SOC) Analyst I

Veriipro; Houston (TX); On-site; USD 60,000 - 76,000; Full time

Job summary

Veriipro is seeking a Security Analyst I to join a 24/7 Security Operations Center as a Tier 1 Cybersecurity Analyst. This role will monitor, investigate, and respond to security alerts, performing initial triage with SIEM and SOAR and escalating complex incidents to the appropriate security teams.

You will gain hands-on experience with Splunk, Splunk SOAR, and Proofpoint while contributing to incident response, detections tuning, and continuous improvements in a fast-paced environment.

Qualifications

• Associate degree or equivalent experience in cybersecurity/IT.
• CompTIA Security+ certification required.
• 2+ years in a SOC or cybersecurity operations environment preferred.
• Hands-on with Splunk, Splunk SOAR and Proofpoint.
• Experience with security alert triage and escalation procedures.
• Knowledge of networking fundamentals, security concepts and log analysis.
• Familiarity with Microsoft security technologies and Azure environments.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work effectively in a 24/7 SOC environment.

Responsibilities

• Monitor and investigate security alerts using SIEM platforms, including Splunk.
• Perform initial alert triage to determine severity, impact, validity, and risk.
• Analyze security logs, network traffic, endpoint activity, and email security events.
• Enrich alerts with threat intel and contextual information.
• Identify incidents and escalate to Tier 2/3 security teams per procedure.
• Document findings, actions, evidence, and incident details in case management systems.
• Execute basic incident response and automation using Splunk SOAR.
• Support 24/7 SOC operations, including shift coverage and handoffs.
• Assist with detection rule tuning and alert optimization.
• Participate in continuous improvement of SOC processes and monitoring.
• Maintain awareness of current threats, vulnerabilities, and industry trends.
• Follow security policies, procedures, escalation paths, and IR protocols.

Skills

Analytical thinking

Problem solving

Written and verbal communication

24/7 SOC capability

Education

Associate degree in Cybersecurity/IT or related field

Tools

Splunk

Splunk SOAR

Proofpoint

Job description

Position Overview

We are seeking a Security Analyst I to join a 24/7 Security Operations Center (SOC) as a Tier 1 Cybersecurity Analyst. This role will serve as the first line of defense, monitoring, investigating, and responding to security alerts and potential threats.

The Security Analyst I will leverage SIEM and SOAR technologies to perform initial alert triage, investigate suspicious activity, support incident response, and elevate confirmed or complex incidents to appropriate security teams. This is an excellent opportunity for a motivated cybersecurity professional looking to grow their expertise in threat detection, incident response, and security operations.

Roles and Responsibilities

• Monitor and investigate security alerts using SIEM platforms, including Splunk.
• Perform initial alert triage to determine severity, impact, validity, and potential business risk.
• Analyze security logs, network traffic, endpoint activity, and email security events.
• Enrich security alerts using threat intelligence and relevant contextual information.
• Identify potential security incidents and escalates them to Tier 2/Tier 3 security teams according to established procedures.
• Document investigation findings, actions taken, evidence, and incident details within case management systems.
• Execute basic incident response and automation activities using Splunk SOAR.
• Support 24/7 SOC operations, including shift coverage, incident handoffs, and operational communications.
• Assist with detection rule tuning and alert optimization to reduce false positives and improve SOC efficiency.
• Participate in continuous improvement initiatives related to SOC processes, procedures, and security monitoring.
• Maintain awareness of current cybersecurity threats, vulnerabilities, attack techniques, and industry trends.
• Follow established security policies, procedures, escalation paths, and incident response protocols.

Required Qualifications

• Associate degree in Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
• CompTIA Security+ certification required.
• 2+ years of experience in a Security Operations Center (SOC) or cybersecurity operations environment preferred.
• Hands-on experience with Splunk, Splunk SOAR, and Proofpoint.
• Experience performing security alert triage and following incident escalation procedures.
• Knowledge of networking fundamentals, security concepts, and log analysis.
• Familiarity with Microsoft security technologies and Azure environments.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work effectively in a fast-paced, 24/7 SOC environment.

Preferred Qualifications

• CompTIA CySA+ certification.
• Splunk Core Certified User certification.
• Microsoft security certifications such as SC-200 or AZ-500.
• Experience with threat intelligence, detection engineering, or incident response.
• Familiarity with security automation and orchestration technologies