SOC Analyst Tier 1

Description

Job Title: SOC Analyst Tier 1

Place of Performance: Springfield, VA

About JFL Consulting:

With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients.

Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com

What We Offer:

• Salary: $65k- $100k
• 100% employer-paid medical, dental, and vision premiums for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)
• We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms

Job Overview:

We're looking for a SOC Analyst Tier 1, the first line of defense in the operations center. This role monitors the SIEM and security tooling dashboards, triages incoming calls and alerts against established playbooks, creates and routes incident tickets, and escalates confirmed or suspected threats to the Tier 2 analyst. Tier 1 analysts are expected to handle high alert volumes efficiently and accurately, minimizing dwell time on genuine threats. 

Key Responsibilities

• Monitor SIEM dashboards and security tooling alerts 
• Serve as the initial triage for all incoming customer calls, alerts, emails, and tickets using established playbooks to categorize, prioritize, and route
• Create detailed tickets for all confirmed or suspected events
• Perform initial investigation steps such as IP lookups, hash lookups, IOC Correlation
• Escalate threats that exceed Tier 1 response authority to Tier 2 within established guidelines
• Close false positives with appropriate documentation 
• Contribute to playbook improvements by flagging outdated or incorrect procedures
• Participate briefings and training sessions
• Maintain the SOC Event log for all events during the shift
• Maintain situational awareness of the threat landscape and active campaigns
• Participate briefings and training sessions

Requirements

Required Qualifications

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, Information Security, or related field. In lieu of degree, 2+ years of experience in a SOC, NOC, IT security, or network operations role 
• One of the following certifications, equivalent or better: Sec+, CYSA+, GSEC; or the ability to obtain the certification within 60 days. 
• Basic understanding of networking and security concepts
• Basic understanding SIEM platforms and log analysis
• Ability to work shifts including nights, weekends, and holidays on rotating schedule

Preferred Qualifications

• Active Secret clearance preferred but not required
• Understanding of MITRE ATT&CK framework
• Experience with ticketing systems (ServiceNow, Jira, or equivalent)

JFL Consulting, LLC is an Equal Opportunity Employer.

We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.