Description

Job Title: SOC Analyst Tier 1

Place of Performance: Springfield, VA

About JFL Consulting

With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients.

Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com

What We Offer

Salary: $65k- $100k
100% employer-paid medical, dental, and vision premiums for employees and dependents
Flexible Spending Accounts (healthcare, dependent care, and commuter)
Life insurance, short-term disability and long-term disability
401(k) with immediate vesting of company contribution
Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)
We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms

Job Overview

We're looking for a SOC Analyst Tier 1, the first line of defense in the operations center. This role monitors the SIEM and security tooling dashboards, triages incoming calls and alerts against established playbooks, creates and routes incident tickets, and escalates confirmed or suspected threats to the Tier 2 analyst. Tier 1 analysts are expected to handle high alert volumes efficiently and accurately, minimizing dwell time on genuine threats.

Key Responsibilities

Monitor SIEM dashboards and security tooling alerts
Serve as the initial triage for all incoming customer calls, alerts, emails, and tickets using established playbooks to categorize, prioritize, and route
Create detailed tickets for all confirmed or suspected events
Perform initial investigation steps such as IP lookups, hash lookups, IOC Correlation
Escalate threats that exceed Tier 1 response authority to Tier 2 within established guidelines
Close false positives with appropriate documentation
Contribute to playbook improvements by flagging outdated or incorrect procedures
Participate briefings and training sessions
Maintain the SOC Event log for all events during the shift
Maintain situational awareness of the threat landscape and active campaigns
Participate briefings and training sessions

Requirements

Required Qualifications

Bachelor's degree in Cyber Security, Information Technology, Computer Science, Information Security, or related field. In lieu of degree, 2+ years of experience in a SOC, NOC, IT security, or network operations role
One of the following certifications, equivalent or better: Sec+, CYSA+, GSEC; or the ability to obtain the certification within 60 days.
Basic understanding of networking and security concepts
Basic understanding SIEM platforms and log analysis
Ability to work shifts including nights, weekends, and holidays on rotating schedule

Preferred Qualifications

Active Secret clearance preferred but not required
Understanding of MITRE ATT&CK framework
Experience with ticketing systems (ServiceNow, Jira, or equivalent)

JFL Consulting, LLC is an Equal Opportunity Employer.

We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.

JFL CONSULTING, LLC

Vacatures

SOC Analyst Tier 1