Tier 1 SOC Analyst

GDH; Rockville (MD); Hybrid; USD 41,000 - 47,000; Full time

Job summary

GDH is seeking a Security Operations Center professional to monitor and respond to security events in a hybrid Rockville, Maryland environment. The role emphasizes incident analysis, log review, and collaboration with the security team to enhance threat detection and response.

The ideal candidate brings 1–3 years in SOC or related settings, familiarity with Splunk and network analysis tools, and the ability to obtain a U.S. government security clearance. This position requires U.S. citizenship.

Qualifications

• 1–3 years in a Security Operations Center (SOC) or related environment, or relevant industry certifications.
• Experience with Windows, Linux, or UNIX.
• Familiarity with SIEMs such as Splunk and comparable platforms.
• Knowledge of network protocols (FTP, HTTP, SSH, SMB).
• Ability to obtain a U.S. Government security clearance; U.S. citizenship required.

Responsibilities

• Monitor, analyze, and respond to security events from SIEM, firewall, IDS/IPS, and endpoint security systems.
• Investigate security events using log analysis and packet capture.
• Elevate critical issues according to procedures and document findings.
• Collaborate with security team to improve threat detection and workflows.
• Communicate technical findings clearly to team members and stakeholders.

Skills

SOC experience

Analytical thinking

Communication skills

Education

Relevant education or certifications

Tools

Splunk

IDS/IPS

Packet capture tools

Network analysis tools

Job description

Role Summary

Responsibilities

• Monitor, analyze, and respond to security events from SIEM, firewall, IDS/IPS, endpoint security, and Network Access Control systems.
• Investigate security events using log analysis, packet capture tools, and network protocol analysis.
• Monitor security alerts and elevate critical or higher-risk issues according to established procedures.
• Develop and maintain security documentation, incident reports, and analysis findings.
• Collaborate with security team members to improve threat detection strategies and operational workflows.
• Support ongoing security operations and incident response activities.
• Analyze security events to distinguish false positives from potential security threats.
• Follow established security standards, procedures, and cybersecurity best practices.
• Maintain knowledge of emerging cybersecurity threats, vulnerabilities, and security practices.
• Communicate technical findings clearly to team members and stakeholders.

Qualifications

• 1 to 3 years of experience in a Security Operations Center (SOC), cybersecurity operations, or a related environment, or relevant industry certifications.
• Relevant education, training, certifications, or equivalent practical experience.
• Experience working with operating systems such as Windows, Linux, or UNIX.
• Experience with SIEM technologies such as Splunk or comparable platforms.
• Familiarity with IDS log analysis, packet capture, and network analysis tools.
• Knowledge of network and application protocols such as FTP, HTTP, SSH, and SMB.
• Strong analytical and problem-solving skills.
• Strong written and verbal communication skills.
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required.
• Ability to work in a hybrid environment in Rockville, Maryland.

Publishing Pay Range: $30.00 – $34.00 hourly

This position offers a hybrid schedule, with time split between the office and remote work.