SOC Analyst I: Onsite Cyber Defense Starter

TekWissen LLC; Herndon (VA); On-site; USD 55,000 - 75,000; Full time

Job summary

TekWissen Group is hiring a SOC Analyst Level I to support continuous monitoring and initial response to security events. You will work in a fast-paced SOC, using Splunk SIEM and ServiceNow to identify, triage, and document incidents across enterprise environments.

The role requires a 24x7 operational mindset, effective communication, and a foundations in networking and security principles, with opportunities for growth within a structured security operations program.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Familiarity with SOC operations and incident response lifecycle.
• Experience with Splunk SIEM and incident logging.
• Ability to work in a 24x7 environment with SLA requirements.

Responsibilities

• Monitor security events and alerts using Splunk SIEM to identify activity across network, endpoint, and cloud environments.
• Perform initial triage and investigation of alerts per defined procedures.
• Respond to security incidents in accordance with SLAs and escalate as needed.
• Log and track incidents in ServiceNow, maintaining lifecycle records.
• Conduct basic threat research to stay informed on emerging threats and attacker techniques.
• Support incident analysis by identifying contributing factors and remediation options.
• Collaborate with security engineering and threat hunting to resolve incidents.
• Follow SOPs and playbooks to ensure consistent incident response.

Skills

SOC operations understanding

Incident response lifecycle

Analytical and problem-solving

Effective communication

Education

Bachelor's degree in Cybersecurity/IT

Tools

Splunk

ServiceNow

Job description

TekWissen Group is hiring a SOC Analyst Level I to support continuous monitoring and initial response to security events. You will work in a fast-paced SOC, using Splunk SIEM and ServiceNow to identify, triage, and document incidents across enterprise environments.

The role requires a 24x7 operational mindset, effective communication, and a foundations in networking and security principles, with opportunities for growth within a structured security operations program.