Job description

Our client, a Communications company, is looking for a SOC Analyst for their Herndon, VA location. Responsibilities: • Work in a fast-paced, SLA-driven Security Operations Center (SOC), using tools such as Splunk (SIEM) and ServiceNow to help identify and manage security incidents. • This position is ideal for individuals looking to build a strong foundation in cybersecurity operations within a structured and process-driven environment, with opportunities for growth and skill development. • Monitor security events and alerts using Splunk SIEM to identify suspicious activity across network, endpoint, and cloud environments. • Perform initial triage and investigation of alerts, following defined procedures to determine severity and required actions. • Respond to security incidents in accordance with established SLAs, ensuring timely escalation and proper handling. • Use ServiceNow to log, track, and document incidents, maintaining accurate records throughout the lifecycle. • Conduct basic threat research to stay informed on emerging threats, vulnerabilities, and attacker techniques. • Support incident analysis by identifying contributing factors and assisting with remediation recommendations. • Collaborate with security engineering, and threat hunting to resolve incidents and strengthen security controls. • Follow and contribute to standard operating procedures (SOPs) and playbooks to ensure consistent incident response. • Communicate clearly with internal stakeholders regarding incident status and actions taken. • Support day-to-day operational activities within the team • Perform technical and operational tasks aligned with business needs • Work may involve hands-on operational support, troubleshooting, and maintenance-type responsibilities (inferred based on role title) Requirements: • Seeking a motivated and detail-oriented SOC Analyst Level I to join our cybersecurity operations team. In this role, you will support continuous monitoring, detection, and initial response to security events across enterprise environments. • Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience) • Proficient understanding of SOC operations and the incident response lifecycle • Familiarity with SIEM tool Splunk. • Exposure to ServiceNow or similar ticketing systems • Knowledge of networking fundamentals, security principles, and log analysis • Strong analytical and problem-solving skills • Ability to work in a 24x7 operational environment with strict SLA requirements • Effective written and verbal communication skills • Relevant certifications (e.g., CompTIA Security+, Splunk certifications) • Familiarity with threat intelligence concepts or frameworks such as MITRE ATT&CK • 2+ years of hands-on experience in security monitoring or incident response environments • Candidates should be able to operate independently and contribute to ongoing operations • Hands-on operational/technical environment involving troubleshooting, maintenance, and use of internal systems/tools in a structured, process-driven setting. Likely includes infrastructure/network-related support • Team-oriented, fast-paced operational environment focused on safety, reliability, and collaboration, with a mix of independent work and team support • A typical day includes reviewing work orders, performing hands-on troubleshooting and maintenance, monitoring systems, responding to issues, and documenting work while collaborating with the team • Ramp-up includes onboarding and training in the first 1–2 weeks, with increasing independence over the first 30 days and full productivity expected within 30–60 days • Must-Have Tools • Splunk (Required): • Hands-on experience with Splunk SIEM is mandatory; ~90% of the work will be performed within Splunk • Candidates should have practical experience and/or Splunk certification Why Should You Apply? • Health Benefits • Referral Program • Excellent growth and advancement opportunities

Requirements

Must-haves

Our client, a Communications company, is looking for a SOC Analyst for their Herndon, VA location.
Work in a fast-paced, SLA-driven Security Operations Center (SOC), using tools such as Splunk (SIEM) and ServiceNow to help identify and manage security incidents.
This position is ideal for individuals looking to build a strong foundation in cybersecurity operations within a structured and process-driven environment, with opportunities for growth and skill development.
Monitor security events and alerts using Splunk SIEM to identify suspicious activity across network, endpoint, and cloud environments.
Perform initial triage and investigation of alerts, following defined procedures to determine severity and required actions.
Respond to security incidents in accordance with established SLAs, ensuring timely escalation and proper handling.
Use ServiceNow to log, track, and document incidents, maintaining accurate records throughout the lifecycle.
Conduct basic threat research to stay informed on emerging threats, vulnerabilities, and attacker techniques.
Support incident analysis by identifying contributing factors and assisting with remediation recommendations.
Collaborate with security engineering, and threat hunting to resolve incidents and strengthen security controls.
Follow and contribute to standard operating procedures (SOPs) and playbooks to ensure consistent incident response.
Communicate clearly with internal stakeholders regarding incident status and actions taken.
Support day-to-day operational activities within the team
Perform technical and operational tasks aligned with business needs
Work may involve hands-on operational support, troubleshooting, and maintenance-type responsibilities (inferred based on role title)
Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)
Proficient understanding of SOC operations and the incident response lifecycle
Familiarity with SIEM tool Splunk.
Exposure to ServiceNow or similar ticketing systems
Knowledge of networking fundamentals, security principles, and log analysis
Strong analytical and problem-solving skills
Ability to work in a 24x7 operational environment with strict SLA requirements
Effective written and verbal communication skills
Relevant certifications (e.g., CompTIA Security+, Splunk certifications)

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: jobdiva
Effort: medium