SOC Splunk Analyst I: Hands-On Security Ops

GCS Recruitment Specialists; United States; On-site; USD 65,000 - 90,000; Full time

Job summary

A Security Operations Analyst (Tier 1) position in Northern Virginia is part of a 24/7 operations center. You will monitor alert queues, classify incidents, and ensure proper handoffs to senior responders while maintaining thorough case records in ServiceNow.

A degree in cybersecurity or hands-on experience, plus working knowledge of Splunk or equivalent SIEM, are required. Shifts rotate, including nights, weekends, and holidays.

Qualifications

• Degree or hands-on experience in cybersecurity, IT, CS, or related field.
• Understanding of how a SOC operates and incident workflows.
• Working knowledge of Splunk or equivalent SIEM.
• Experience with ticketing platforms such as ServiceNow.
• Foundation in networking and core security concepts, plus log reading.
• Willingness to rotate shifts including nights, weekends and holidays.

Responsibilities

• Monitor alert queues and dashboards in SIEM for signs of malicious or unusual activity across networks, endpoints, and cloud systems.
• Assess incoming alerts against runbooks, rate their severity, and determine next steps.
• Escalate confirmed issues within required response times and hand off to senior responders.
• Maintain detailed case records in a ticketing platform from first alert to closure.
• Stay updated on current threat activity, vulnerabilities, and attacker behavior.
• Assist senior analysts in reconstructing incidents and suggesting fixes to prevent recurrence.
• Collaborate with engineering and threat-hunting teams to close gaps and improve defenses.
• Follow runbooks consistently and propose improvements when observed.
• Provide clear status updates to internal teams during an incident.

Skills

SIEM (Splunk)

Incident response

Threat detection

Networking basics

Analytical/problem solving

Written and verbal communication

Education

Degree in cybersecurity/IT/CS or related field

Tools

ServiceNow

Job description

A Security Operations Analyst (Tier 1) position in Northern Virginia is part of a 24/7 operations center. You will monitor alert queues, classify incidents, and ensure proper handoffs to senior responders while maintaining thorough case records in ServiceNow.

A degree in cybersecurity or hands-on experience, plus working knowledge of Splunk or equivalent SIEM, are required. Shifts rotate, including nights, weekends, and holidays.