SOC Tier 1 Analyst

your Jared; Northern (KY); Hybrid; USD 65,000 - 90,000; Full time

Job summary

Defianx is seeking a SOC Tier 1 Analyst to act as the frontline defender in a Security Operations Center. You will continuously monitor security events, triage alerts, document findings, and escalate threats according to defined procedures.

The role requires attention to detail, strong cybersecurity fundamentals, and the ability to work in a 24x7 environment. You will review alerts from SIEM, EDR, email security, network tools, cloud security platforms, and threat intel feeds.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity preferred.
• Experience with monitoring security events and incident response is desirable.
• Knowledge of TCP/IP, DNS, HTTP, Active Directory, VPN, and cloud security fundamentals is expected.

Responsibilities

• Monitor security events across SIEM and related tools.
• Triage alerts and perform initial investigations of potential security incidents.
• Document investigative findings and escalate to higher-level analysts as needed.
• Maintain incident tickets and follow established procedures.

Skills

Cybersecurity fundamentals

Analytical thinking

Attention to detail

Written communication

24x7 operational mindset

Learning agility

Tools

SIEM platforms

EDR solutions

Ticketing systems

Log analysis tools

Network monitoring tools

Job description

Defianx | Full time

• Date Opened 06/08/2026


• Job Type Full time


• Industry Government/Military


• Work Experience 1-3 years

This is a remote position.

The SOC Tier 1 Analyst serves as the frontline defender within the Security Operations Center. This position is responsible for continuous monitoring of security events, performing alert triage, documenting investigative findings, validating suspicious activity, and escalating confirmed threats according to established procedures.

The SOC Tier 1 Analyst serves as the first line of cyber defense within the Security Operations Center. This position is responsible for continuously monitoring security tools, reviewing alerts, identifying suspicious activity, and conducting initial investigations of potential security events. The analyst serves as the organization's frontline defender and is often the first person to identify indicators of malicious activity.

The Tier 1 Analyst reviews alerts generated by security technologies including SIEM platforms, EDR solutions, email security systems, network monitoring tools, cloud security platforms, and threat intelligence feeds. The analyst determines whether activity represents a false positive, a policy violation, or a potential security incident requiring escalation.

The position requires disciplined analytical thinking, attention to detail, and the ability to follow established procedures while maintaining awareness of the broader threat landscape. The analyst is responsible for documenting findings, creating incident tickets, collecting initial evidence, and escalating incidents to higher-level analysts when required.

The successful candidate must possess a strong understanding of cybersecurity fundamentals including networking concepts, operating systems, authentication mechanisms, malware behavior, phishing techniques, and common attack methods. The analyst should understand TCP/IP, DNS, HTTP, Active Directory, VPN technologies, and cloud security fundamentals.

The candidate must demonstrate experience using SIEM platforms, security dashboards, log analysis tools, endpoint detection solutions, ticketing systems, and incident management workflows. Strong written communication skills are essential because analysts must document investigations clearly and provide concise incident summaries.

The position requires the ability to work effectively in a 24x7 operational environment while maintaining focus during periods of high alert volume. Candidates should demonstrate curiosity, adaptability, and a willingness to learn new technologies continuously and threat actor techniques.

Typical certifications include Security+, CySA+, GSEC, SSCP, or equivalent cybersecurity certifications. The candidate must have a minimum of Secrete Clearance.

At Defianx, we believe that great people build great outcomes. We are committed to supporting our employees with a competitive benefits package designed to promote health, professional growth, work-life balance, and long-term career success.

• Eligible employees have access to medical benefits, paid time off, paid holidays, professional development opportunities, certification support, and flexible work arrangements based on customer and operational requirements.

Defianx is committed to creating an environment where talented professionals can thrive while delivering exceptional value to our customers.