SOC Analyst I: Real-Time Security & Incident Triage

The CORE Institute; Phoenix (AZ); Remote; USD 70,000 - 90,000; Full time

Job summary

The CORE Institute is seeking a SOC Analyst to monitor and respond to real-time security alerts, triage incidents, and perform basic threat analysis. The role supports after-hours IT operations and collaborates with Information Security and IT teams to ensure timely resolution of alerts.

Ideal candidates have 1–2 years in a SOC or IT operations role, preferably in healthcare, and hold a Security+ or equivalent certification. This is an on-site position in a standard office environment.

Qualifications

• Associates degree in Cybersecurity, IT, or related field or equivalent experience.
• 1-2 years in a SOC or IT operations role, healthcare/regulatory environment preferred.
• Security+ or equivalent certification.

Responsibilities

• Monitor and respond to SOC alerts in real time with urgency and precision.
• Triage and escalate incidents per playbooks and SOPs.
• Perform basic analysis of security threats and vulnerabilities.
• Provide after-hours IT support for a low-volume queue with initial troubleshooting.
• Collaborate with Information Security and IT Operations to track and resolve alerts.
• Maintain documentation of alerts, actions, and resolution status in tickets.
• Proactively monitor critical infrastructure and application environments.
• Ensure uptime and performance metrics are met and maintained.
• Exercise independent judgment in analyzing and responding to incidents.

Education

Associates degree in Cybersecurity, Information Technology, or a related field, or equivalent combination of education and experience

Tools

SIEM tools

Splunk

Microsoft Sentinel

CrowdStrike

Job description

The CORE Institute is seeking a SOC Analyst to monitor and respond to real-time security alerts, triage incidents, and perform basic threat analysis. The role supports after-hours IT operations and collaborates with Information Security and IT teams to ensure timely resolution of alerts.

Ideal candidates have 1–2 years in a SOC or IT operations role, preferably in healthcare, and hold a Security+ or equivalent certification. This is an on-site position in a standard office environment.