Tier 1 Security Operations Center (SOC) Analyst - Secret or TS Clearance

IBSS is hiring a Tier 1 Security Operations Center Analyst to provide continuous monitoring and first-tier triage of security events across a customer’s enterprise. The role evaluates and documents alerts, escalates suspected incidents, and supports SOC situational awareness and user security education.

What you'll do:

• Monitor SIEM, EDR, IDS/IPS, firewall, email security, and other security tool consoles in real time for events that may point to an incident
• Perform initial triage of alerts using established playbooks and SOPs, and determine whether each is a false positive, benign activity, or a potential incident
• Escalate validated or suspected incidents to Tier 2 analysts and incident response staff on time, with the supporting evidence attached
• Create, update, and close tickets in the case management system, with clear and accurate documentation of actions taken
• Review user-reported phishing emails and suspicious activity reports, and perform basic analysis of headers, URLs, and attachments
• Conduct basic research on indicators of compromise (IPs, domains, file hashes) using threat intelligence sources and reputation tools
• Identify potential threats and respond to reported security violations under the direction of senior SOC staff
• Help determine the causes of security events, and recommend improvements to monitoring rules and procedures
• Track the status of open investigations and contribute to shift turnover reports, daily summaries, and metrics reporting
• Follow incident handling, data handling, and chain-of-custody procedures in line with customer policy and NIST SP 800-61 guidance
• Assist in educating users on security procedures and report suspicious trends to SOC leadership
• Maintain awareness of current threats, vulnerabilities, and attacker techniques relevant to the customer environment

What they're looking for:

• Active Secret or TS required
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field
• 0 to 2 years of experience in IT, security operations, network operations, or a related technical field (internships, labs, and military experience count)
• A DoD 8140/8570-compliant baseline certification at IAT Level II or higher (such as CompTIA Security+ CE), or the ability to obtain one within 6 months of hire
• Foundational knowledge of TCP/IP, common ports and protocols, DNS, and network architecture
• A working understanding of Windows and Linux operating systems and their logs
• Familiarity with common attack types, including phishing, malware, brute force, and lateral movement
• Basic understanding of the incident response lifecycle and the MITRE ATT&CK framework
• Strong attention to detail and the ability to follow procedures consistently
• Clear written and verbal communication skills for ticket documentation and escalations
• Hands-on experience with Microsoft Sentinel, SentinelOne, and Palo Alto XSOAR
• Exposure to EDR tools such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or SentinelOne

Benefits:

• Medical, dental, vision, and prescription drug coverage with a company-paid deductible
• Paid time off
• Federal holidays
• A matching 401K plan
• Tuition/professional development reimbursement
• Flex-Spending (FSA)/Dependent Care Account (DCA) options
• Career development opportunities