Information Security Analyst, SOC Analyst

Job Title: Information Security Analyst – SOC Analyst

About the Role

We are seeking a motivated and technically skilled Information Security Analyst 1 (Security Operations Center – SOC Analyst) to support cybersecurity operations by monitoring security events, investigating potential threats, and responding to security incidents. The ideal candidate will have hands-on experience with SIEM platforms, security alert triage, log analysis, endpoint security, and incident response. This role requires strong analytical and problem-solving skills, attention to detail, and the ability to work effectively in a fast-paced cybersecurity environment.

Key Responsibilities

• Security Monitoring: Monitor network traffic, system logs, endpoints, and security dashboards to identify suspicious activities and potential security threats.
• Alert Triage: Review, validate, prioritize, and investigate security alerts generated by SIEM, EDR, IDS/IPS, and other security tools.
• Incident Response: Investigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access, and potential data breaches.
• SIEM Operations: Utilize SIEM platforms to correlate security events, identify anomalies, investigate alerts, and support threat detection activities.
• Log Analysis: Analyze logs from operating systems, firewalls, network devices, antivirus solutions, and endpoints to identify indicators of compromise.
• Threat Hunting: Conduct proactive threat-hunting activities using SIEM and endpoint security tools to identify hidden threats and suspicious behavior.
• Threat Intelligence: Research emerging cybersecurity threats, vulnerabilities, attack techniques, and indicators of compromise to improve detection capabilities.
• Security Tool Management: Work with security technologies, including SIEM, IDS/IPS, firewalls, antivirus, endpoint detection and response (EDR), and Public Key Infrastructure (PKI).
• Automation and Scripting: Use Python or PowerShell to automate repetitive tasks, support investigations, and improve security operations where appropriate.
• Documentation and Reporting: Maintain accurate incident records, document investigation findings, and prepare security reports in accordance with established procedures.
• Security Improvement: Help develop and refine detection rules, incident response procedures, and security monitoring processes.
• Team Collaboration: Collaborate with cybersecurity, network, infrastructure, and IT teams to investigate, contain, and resolve security issues.

Requirements & Tech Stack

• Strong understanding of cybersecurity principles, network security, operating systems, and common network protocols.
• Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, IBM QRadar, or equivalent platforms.
• Experience in security monitoring, alert triage, event correlation, and incident investigation.
• Ability to analyze system, network, firewall, and endpoint logs to identify suspicious activity.
• Working knowledge of incident response processes and security threat mitigation.
• Familiarity with endpoint security, EDR, antivirus, firewalls, and IDS/IPS technologies.
• Understanding of common cyberattacks, including phishing, malware, ransomware, unauthorized access, and account compromise.
• Basic knowledge of threat intelligence, indicators of compromise (IOCs), and attacker tactics and techniques.
• Knowledge of Python or PowerShell scripting for automation and security analysis.
• Basic understanding of computer forensics and digital evidence handling.
• Strong analytical, troubleshooting, communication, and documentation skills.
• Ability to work collaboratively in a fast-paced security operations environment.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, or a related field.
• Relevant cybersecurity certifications, such as CompTIA Security+ or equivalent, are beneficial.

Work Arrangement and Interview Process

• Work Location: Dover, Delaware 19904
• Work Model: Hybrid, with up to three days per week onsite.
• Interview: Microsoft Teams.