SOC Analyst Level I

TekWissen LLC; Herndon (VA); Sur place; USD 55 000 - 75 000; Plein temps

Résumé du poste

TekWissen Group is hiring a SOC Analyst Level I to support continuous monitoring and initial response to security events. You will work in a fast-paced SOC, using Splunk SIEM and ServiceNow to identify, triage, and document incidents across enterprise environments.

The role requires a 24x7 operational mindset, effective communication, and a foundations in networking and security principles, with opportunities for growth within a structured security operations program.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• Familiarity with SOC operations and incident response lifecycle.
• Experience with Splunk SIEM and incident logging.
• Ability to work in a 24x7 environment with SLA requirements.

Responsabilités

• Monitor security events and alerts using Splunk SIEM to identify activity across network, endpoint, and cloud environments.
• Perform initial triage and investigation of alerts per defined procedures.
• Respond to security incidents in accordance with SLAs and escalate as needed.
• Log and track incidents in ServiceNow, maintaining lifecycle records.
• Conduct basic threat research to stay informed on emerging threats and attacker techniques.
• Support incident analysis by identifying contributing factors and remediation options.
• Collaborate with security engineering and threat hunting to resolve incidents.
• Follow SOPs and playbooks to ensure consistent incident response.

Connaissances

SOC operations understanding

Incident response lifecycle

Analytical and problem-solving

Effective communication

Formation

Bachelor's degree in Cybersecurity/IT

Outils

Splunk

ServiceNow

Description du poste

Overview:

TekWissen is a global workforce management provider headquartered in Ann Arbor, Michigan that offers strategic talent solutions to our clients world-wide. The below job opportunity is to one of Our clients is an American telecommunications company headquartered in Monroe, Louisiana, that offers communications, network services, security, cloud solutions, voice, and managed services.

Job Title: SOC Analyst Level I

• Location: Herndon, VA 20171
• Duration: 12 Months
• Job Type: Temporary Assignment
• Work Type: Onsite

Job Description:

• We are seeking a motivated and detail-oriented SOC Analyst Level I to join our cybersecurity operations team.
• In this role, you will support continuous monitoring, detection, and initial response to security events across enterprise environments.
• You will work in a fast-paced, SLA-driven Security Operations Center (SOC), using tools such as Splunk (SIEM) and ServiceNow to help identify and manage security incidents.
• This position is ideal for individuals looking to build a strong foundation in cybersecurity operations within a structured and process-driven environment, with opportunities for growth and skill development.

Key Responsibilities

• Monitor security events and alerts using Splunk SIEM to identify suspicious activity across network, endpoint, and cloud environments.
• Perform initial triage and investigation of alerts, following defined procedures to determine severity and required actions.
• Respond to security incidents in accordance with established SLAs, ensuring timely escalation and proper handling.
• Use ServiceNow to log, track, and document incidents, maintaining accurate records throughout the lifecycle.
• Conduct basic threat research to stay informed on emerging threats, vulnerabilities, and attacker techniques.
• Support incident analysis by identifying contributing factors and assisting with remediation recommendations.
• Collaborate with security engineering, and threat hunting to resolve incidents and strengthen security controls.
• Follow and contribute to standard operating procedures (SOPs) and playbooks to ensure consistent incident response.
• Communicate clearly with internal stakeholders regarding incident status and actions taken.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
• Proficient understanding of SOC operations and the incident response lifecycle.
• Familiarity with SIEM tool Splunk.
• Exposure to ServiceNow or similar ticketing systems.
• Knowledge of networking fundamentals, security principles, and log analysis.
• Strong analytical and problem-solving skills.
• Ability to work in a 24x7 operational environment with strict SLA requirements.
• Effective written and verbal communication skills.

Preferred Qualifications

• Relevant certifications (e.g., CompTIA Security+, Splunk certifications).
• Familiarity with threat intelligence concepts or frameworks such as MITRE ATT&CK.
• 2+ years of hands‑on experience in security monitoring or incident response environments.

TekWissen Group is an equal opportunity employer supporting workforce diversity.