Tier 1 SOC Analyst

GDH; Rockville (MD); Hybrid; USD 41,000 - 47,000; Full time

Job summary

GDH is seeking a Tier 1 Security Operations Analyst to monitor, analyze, and respond to cybersecurity events across multiple data sources. The role requires strong technical analysis, communication, and documentation skills and offers a hybrid work arrangement in Rockville, MD.

Responsibilities include investigating security events, maintaining incident reports, and collaborating with the security team to strengthen threat detection and operational workflows. U.S.

Qualifications

• 1 to 3 years of experience in a SOC or related environment, or relevant industry certifications.
• Relevant education, training, certifications, or equivalent practical experience.
• Experience with Windows, Linux, or UNIX.
• Experience with SIEM technologies such as Splunk or comparable platforms.
• Familiarity with IDS log analysis, packet capture, and network analysis tools.
• Knowledge of FTP, HTTP, SSH, and SMB protocols.
• Strong analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Eligibility for a U.S. Government security clearance; U.S. citizenship required.
• Ability to work in a hybrid environment in Rockville, Maryland.

Responsibilities

• Monitor, analyze, and respond to security events from SIEM, firewall, IDS/IPS, endpoint security, and NAC systems.
• Investigate security events using log analysis, packet capture tools, and network protocol analysis.
• Monitor security alerts and escalate high-risk issues according to procedures.
• Develop and maintain security documentation, incident reports, and analysis findings.
• Collaborate with security team members to improve threat detection strategies and workflows.
• Support ongoing security operations and incident response activities.
• Analyze security events to distinguish false positives from true threats.
• Follow established security standards, procedures, and best practices.
• Maintain knowledge of emerging cybersecurity threats, vulnerabilities, and security practices.
• Communicate technical findings clearly to team members and stakeholders.

Skills

Analytical thinking

Written and verbal communication

Security clearance eligibility

Education

Relevant education or certifications

Tools

Splunk

SIEM tools

Packet capture tools

Job description

Role Summary

The Tier 1 Security Operations Analyst is responsible for monitoring, analyzing, and responding to cybersecurity events across multiple data sources within a security operations environment. This role identifies potential threats, investigates security alerts, and supports incident response activities using security monitoring and analysis tools. The position requires strong technical analysis, communication, and documentation skills.

Responsibilities

• Monitor, analyze, and respond to security events from SIEM, firewall, IDS/IPS, endpoint security, and Network Access Control systems.
• Investigate security events using log analysis, packet capture tools, and network protocol analysis.
• Monitor security alerts and elevate critical or higher-risk issues according to established procedures.
• Develop and maintain security documentation, incident reports, and analysis findings.
• Collaborate with security team members to improve threat detection strategies and operational workflows.
• Support ongoing security operations and incident response activities.
• Analyze security events to distinguish false positives from potential security threats.
• Follow established security standards, procedures, and cybersecurity best practices.
• Maintain knowledge of emerging cybersecurity threats, vulnerabilities, and security practices.
• Communicate technical findings clearly to team members and stakeholders.

Qualifications

• 1 to 3 years of experience in a Security Operations Center (SOC), cybersecurity operations, or a related environment, or relevant industry certifications.
• Relevant education, training, certifications, or equivalent practical experience.
• Experience working with operating systems such as Windows, Linux, or UNIX.
• Experience with SIEM technologies such as Splunk or comparable platforms.
• Familiarity with IDS log analysis, packet capture, and network analysis tools.
• Knowledge of network and application protocols such as FTP, HTTP, SSH, and SMB.
• Strong analytical and problem-solving skills.
• Strong written and verbal communication skills.
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required.
• Ability to work in a hybrid environment in Rockville, Maryland.

Publishing Pay Range: $30.00 – $34.00 hourly

This position offers a hybrid schedule, with time split between the office and remote work.