SOC Analyst I

About the Role

SOClogix is hiring a SOC Analyst I to join our 24/7 Security Operations Center. This is an entry-to-junior level position ideal for someone looking to launch or accelerate their cybersecurity career in a real-world, hands-on SOC environment. You'll monitor client environments, investigate security alerts, escalate confirmed threats, and contribute to the continuous improvement of our detection and response capabilities.

What You'll Do

• Monitor security alerts across SIEM, EDR, email security, and cloud platforms for multiple client environments
• Perform initial triage and investigation of security events - determine true positives, false positives, and benign activity
• Escalate confirmed incidents to senior analysts and the incident response team per established runbooks
• Document investigation findings, actions taken, and recommendations in the ticketing system
• Monitor Microsoft 365 environments for suspicious sign-ins, mail flow anomalies, and policy violations
• Assist with onboarding new clients by validating log ingestion and alert tuning
• Contribute to the development and refinement of detection rules, playbooks, and SOPs
• Participate in shift-based coverage to support 24/7/365 SOC operations
• Stay current on emerging threats, vulnerabilities, and attack techniques through internal training and self-study

Requirements

• 0–2 years of experience in cybersecurity, IT support, or a related technical field
• Foundational understanding of networking concepts (TCP/IP, DNS, HTTP/S, firewalls, VPNs)
• Basic knowledge of Windows and Linux operating systems
• Familiarity with common attack types: phishing, malware, brute force, lateral movement
• Ability to read and interpret log data from firewalls, endpoints, and cloud services
• Strong analytical and problem-solving mindset - curiosity about how things work (and break)
• Clear written and verbal communication skills
• At least one relevant certification or actively pursuing: CompTIA Security+, CySA+, Network+, or equivalent
• Willingness to work rotating shifts, including nights, weekends, and holidays

Nice to Have

• Hands-on experience with a SIEM platform (OpenSearch, Splunk, Sentinel, Elastic)
• Exposure to EDR tools (LimaCharlie, CrowdStrike, SentinelOne, Microsoft Defender)
• Home lab or CTF competition experience
• Familiarity with MITRE ATT&CK framework
• Scripting basics (Python, PowerShell, or Bash)
• Degree in cybersecurity, information technology, computer science, or related field

Benefits

• Competitive salary with shift differential pay
• Health, dental, and vision insurance
• 401(k) with company match
• Unlimited PTO
• Certification reimbursement (Security+, CySA+, GCIA, and more)
• Structured mentorship and clear path to SOC Analyst II
• Remote-first culture with flexible scheduling within shift requirements
• Hands-on training with enterprise security tools in a real SOC environment