SOC Analyst I — Entry-Level Cyber Defense

Foresite MSP; Overland Park (KS); On-site; USD 60,000 - 85,000; Full time

Job summary

Foresite MSP seeks a SOC Analyst I to start a cybersecurity career within our 24/7 Cyber Fusion Center. You will monitor and triage security alerts across customer environments and learn our detection stack under experienced analysts.

You will handle Tier 1 investigations, document findings in tickets, and collaborate with customers and team leads to improve detections while meeting defined SLAs.

Qualifications

• 0–2 years of experience in a SOC, IT security, IT operations, or helpdesk/NOC role.
• Knowledge of the cyber kill chain or MITRE ATT&CK framework and common attack vectors.
• Familiarity with a SIEM; training provided if Chronicle experience is not present.
• Strong written communication in ticketing and reporting.

Responsibilities

• Monitor and triage security alerts across customer environments during your shift.
• Investigate Tier 1 incidents end-to-end; gather evidence and provide disposition or escalation.
• Follow investigation playbooks for top alert types and flag gaps for improvement.
• Document clear, actionable tickets understandable by customers, auditors, and teammates.
• Collaborate with customers through the ticketing system for routine investigations and requests.
• Meet SLA and quality targets for first-touch time, triage accuracy, and ticket closure quality.
• Participate in shift handoffs and brief the incoming analyst on open investigations.
• Contribute to detections fidelity by flagging noisy rules and alert clusters.

Skills

SOC basics

IT security

IT operations

Helpdesk/NOC

Education

Cybersecurity degree/certificate

Tools

Chronicle SIEM

SOAR platform

Job description

Foresite MSP seeks a SOC Analyst I to start a cybersecurity career within our 24/7 Cyber Fusion Center. You will monitor and triage security alerts across customer environments and learn our detection stack under experienced analysts.

You will handle Tier 1 investigations, document findings in tickets, and collaborate with customers and team leads to improve detections while meeting defined SLAs.