SOC Analyst, Tier 1

AspenView Technology Partners; United States; Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Competitive base

Flexible work model: hybrid/remote/in‑

Growth opportunities

Inclusive culture

Job summary

AspenView Technology Partners is seeking a Tier 1 SOC Analyst to join the security operations team for a US-based education client. You will triage alerts, perform initial investigations, and document findings, escalating to Tier 2 when needed.

The role requires rotating shifts, strong written communication, and a collaborative mindset. A nearshore, people-first culture offers growth opportunities and supportive leadership.

Qualifications

• 2+ years operating in a SOC/NOC or similar monitoring role.
• English communication strong for 3am escalations and notes.
• Diligent, team-oriented mindset with proactive issue escalation.

Responsibilities

• Own first-line triage of alerts within your shift against severities.
• Conduct initial investigations by collecting logs, inspecting hosts, and reviewing accounts.
• Close non-actionable alerts with clear notes for post-review.

Skills

2+ years in SOC/NOC

English proficiency

Documentation & teamwork

Tools

Microsoft Sentinel

Splunk

QRadar

Elastic

MITRE ATT&CK

PowerShell

Job description

Build the Future with AspenView Technology Partners

At AspenView, we are passionate about transforming the way organizations approach technology. We specialize in creating high-performing, nearshore IT teams to help North American clients innovate faster and more efficiently.

As we continue to grow, we're looking for exceptional people to join our team and help drive impactful change across industries.

Why Join AspenView?

At AspenView, we're more than a nearshore IT partner- we're a people-first, purpose-driven company that believes great culture drives great outcomes. We're passionate about connecting talent and technology to deliver measurable value for clients and meaningful career paths for our people.

Here's what you can expect:

• Competitive base
• Flexible work model: hybrid, remote, or in-office
• Real growth opportunities and leadership visibility
• Inclusive, respectful culture that blends U.S. innovation with Colombian heart
• A company that listens, invests in you, and celebrates wins together

Tier 1 SOC Analyst

A critical first responder within the security operations team, monitoring a US higher-education client on a shift rotation. You are responsible for executing triage properly: working the alert, determining its validity, and either closing it with a justified note or escalating it cleanly so the next person has exactly what they need. You will never guess who owns a system, as each account has a named engineer behind it, and you will always have a Tier 2 analyst available on shift or on call to support you.

What you will do:

Alert Triage & Investigation

• Own the first-line triage of every alert that reaches the queue during your shift, acting against each client's agreed severity tiers.
• Conduct initial investigations by pulling logs, checking hosts, and reviewing accounts to establish whether a genuine event occurred.
• Close non-actionable alerts with clear, detailed notes that stand up to later review.

Escalation & Collaboration

• Deliver clean escalations; ensure that a Tier 2 analyst never has to redo your investigative work to understand the case.
• Write comprehensive shift handovers so the incoming analyst can act immediately without requiring a phone call.
• Actively improve the queue by flagging repetitive alerts (seen three times or more) to trigger detection rule changes.

Tools & Technologies

• SIEM Platforms: Hands-on experience with Microsoft Sentinel (preferred), Splunk, QRadar, or Elastic.
• Frameworks: Working, practical knowledge of MITRE ATT&CK applied directly to real-world alerts.
• Infrastructure: Solid networking, Windows, and Linux fundamentals to distinguish misconfigurations from actual intrusions.

What you bring:

• Experience: Two or more years operating in a SOC, NOC, or comparable monitoring role.
• Communication: English proficiency that holds up reliably in written notes and on 3am escalation calls.
• Mindset: Diligent and team-oriented. You accelerate early rather than sitting on a potential issue, and you value clean documentation.
• Availability: Complete comfort with working rotating shifts, including nights and weekends, as a permanent working pattern.

Bonus Qualifications

Proficiency in KQL, Python, or PowerShell scripting; familiarity with EDR consoles (Microsoft Defender, CrowdStrike, SentinelOne); exposure to phishing analysis or identity-based attacks; and relevant certifications such as SC-200, CySA+, BTL1, or Security+.

Visa Sponsorship

AspenView does not sponsor employment visas for this role. Applicants must be permanently authorized to work in their country of residence and must not require visa sponsorship now or in the future.

Equal Opportunity Employer

AspenView is proud to be an equal opportunity employer. We believe in creating an environment where all employees feel welcome, valued, and empowered to succeed. We celebrate diversity and strive to build a culture of inclusion where all individuals, regardless of their race, color, gender, gender identity or expression, sexual orientation, disability, age, or any other characteristic, can thrive. We encourage applicants from all walks of life to join our team and make a lasting impact.