SOC Analyst I

SOClogix, Inc.; Catonsville (MD); Hybrid; USD 55,000 - 75,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) match

Unlimited PTO

Certification reimbursement

Mentorship program

Remote-first culture

Shift differential

Job summary

SOClogix, Inc. is seeking a SOC Analyst I to join our 24/7 Security Operations Center. This entry-level role focuses on monitoring client environments, investigating alerts, and supporting detection and response efforts in a real SOC.

Based in the US, this shift-based full-time position offers remote and Catonsville on-site options, with opportunities to grow to SOC Analyst II through mentorship and hands-on training.

Qualifications

• 0–2 years in cybersecurity, IT support or related field.
• Foundational networking concepts (TCP/IP, DNS, HTTP/S, firewalls, VPNs).
• Basic Windows and Linux operating systems knowledge.
• Familiarity with phishing, malware, brute force and lateral movement.
• Ability to read and interpret logs from firewalls, endpoints and cloud services.
• Willingness to work rotating shifts, including nights and weekends.

Responsibilities

• Monitor alerts across SIEM, EDR, email security, and cloud for multiple environments.
• Perform initial triage to identify true/false positives and benign activity.
• Escalate incidents to senior analysts per runbooks.
• Document findings, actions, and recommendations in ticketing system.
• Monitor Microsoft 365 for suspicious sign-ins, mail flow, and policy violations.
• Assist onboarding by validating log ingestion and alert tuning.
• Contribute to development of detection rules, playbooks, and SOPs.
• Provide 24/7 shift coverage as part of SOC operations.
• Stay current on threats and attack techniques through training.

Skills

SIEM triage

Incident response basics

Windows & Linux basics

Networking fundamentals

Log analysis

Analytical mindset

Clear communication

Education

CompTIA Security+

Network+

Tools

OpenSearch

Splunk

Microsoft Defender

CrowdStrike

SentinelOne

Job description

Security Operations Remote (US) / Catonsville, MD Full-Time (Shift-Based) $55K–$75K DOE

About the Role

SOClogix is hiring a SOC Analyst I to join our 24/7 Security Operations Center. This is an entry-to-junior level position ideal for someone looking to launch or accelerate their cybersecurity career in a real-world, hands-on SOC environment. You'll monitor client environments, investigate security alerts, elevate confirmed threats, and contribute to the continuous improvement of our detection and response capabilities.

What You'll Do

• Monitor security alerts across SIEM, EDR, email security, and cloud platforms for multiple client environments
• Perform initial triage and investigation of security events - determine true positives, false positives, and benign activity
• Escalate confirmed incidents to senior analysts and the incident response team per established runbooks
• Document investigation findings, actions taken, and recommendations in the ticketing system
• Monitor Microsoft 365 environments for suspicious sign-ins, mail flow anomalies, and policy violations
• Assist with onboarding new clients by validating log ingestion and alert tuning
• Contribute to the development and refinement of detection rules, playbooks, and SOPs
• Participate in shift-based coverage to support 24/7/365 SOC operations
• Stay current on emerging threats, vulnerabilities, and attack techniques through internal training and self-study

Requirements

• 0–2 years of experience in cybersecurity, IT support, or a related technical field
• Foundational understanding of networking concepts (TCP/IP, DNS, HTTP/S, firewalls, VPNs)
• Basic knowledge of Windows and Linux operating systems
• Familiarity with common attack types: phishing, malware, brute force, lateral movement
• Ability to read and interpret log data from firewalls, endpoints, and cloud services
• Strong analytical and problem-solving mindset - curiosity about how things work (and break)
• Clear written and verbal communication skills
• At least one relevant certification or actively pursuing: CompTIA Security+, CySA+, Network+, or equivalent
• Willingness to work rotating shifts, including nights, weekends, and holidays

Nice to Have

• Hands-on experience with a SIEM platform (OpenSearch, Splunk, Sentinel, Elastic)
• Exposure to EDR tools (LimaCharlie, CrowdStrike, SentinelOne, Microsoft Defender)
• Home lab or CTF competition experience
• Familiarity with MITRE ATT&CK framework
• Scripting basics (Python, PowerShell, or Bash)
• Degree in cybersecurity, information technology, computer science, or related field
• Competitive salary with shift differential pay
• Health, dental, and vision insurance
• 401(k) with company match
• Unlimited PTO
• Certification reimbursement (Security+, CySA+, GCIA, and more)
• Structured mentorship and clear path to SOC Analyst II
• Remote-first culture with flexible scheduling within shift requirements
• Hands-on training with enterprise security tools in a real SOC environment