> Markdown version of [/jobs/ext/1173444-csoc-tier-1-analyst](https://www.wearedevelopers.com/jobs/ext/1173444-csoc-tier-1-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CSOC Tier 1 Analyst - **Company:** C AND S.E. NGINEERING INC - **Location:** Rockville, MD, United States - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Cyber Security, Issue Tracking Systems, Information Technology, Splunk - **Published:** July 3, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=fa99621508f8d136 ## About the Role * Bachelor's degree and 1 to 3 years of cyber operation experience. * Additional work experience and certifications will be considered in lieu of a bachelor's degree. * Certifications: Splunk Core Certified User, Security+, and A+ * Ability to work a day or night shift rotational schedule. * Additional Desired Experience: ITIL, SNOW, * HHS experience a plus. ## Description CSEngineering is looking to add a CSOC Tier 1 Analyst to our growing team! As the Cyber Security Operations Center (CSOC) Tier 1 Analyst, you are responsible for the initial assessment of alerts and notification to determine whether an incident requires Level II and III support. This position operates within a team of CSOC Analysts and escalates incidents to appropriate levels within CSOC hierarchy based on requirements and standard operating procedures., * Provide Level I technical support in CSOC operations and activities. (CSOC is a 24/7 operations center environment.) * Provide daily/weekly updates to CSOC Level II support on CSOC operations and developments. * Perform initial triage and response of CSOC events, notifications, and alerts. * Identify security incidents and distinguish them from non-security-related issues and escalate to the appropriate tier within the CSOC hierarchy, while maintaining clear documentation. * Operate within the CSOC ticketing system and participate in the development and optimization of efficient incident reporting procedures. * Maintain awareness of the IT infrastructure and changes that may impact national cybersecurity or predicator detection. * Recommend procedures to Security Operations Center (CSOC) Level II support for improvement of the level one CSOC duties and activities. * Maintain up to date information about the comprehensive security tool suite available within the organization to effectively develop and escalate security incidents. * Participate in ongoing informal as well as formal knowledge-sharing sessions within CSOC and IT departments. * Assist, as required, with the forensic analysis of less complex digital media devices. * Assist with the documentation required for the findings and recommendations for digital media analysis., * Final candidates may be subject to employment verification, education verification, professional reference checks, criminal background screening, security clearance verification, and/or suitability review, as permitted by applicable federal, state, and local laws. * Candidates are expected to provide accurate and complete information throughout the application and interview process. Any material misrepresentation, omission of relevant information, falsification of qualifications, certifications, employment history, clearance status, or educational credentials may result in removal from consideration or withdrawal of an employment offer. * For positions supporting federal agencies or government contracts, additional security, clearance, credentialing, or customer-specific suitability requirements may apply. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Recruiting in 2025: Will AI Help or Take Over?](https://www.wearedevelopers.com/videos/1301-recruiting-in-2025-will-ai-help-or-take-over) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [7 tips for releasing on a Friday afternoon: YouTrack to the rescue](https://www.wearedevelopers.com/videos/204-7-tips-for-releasing-on-a-friday-afternoon-youtrack-to-the-rescue) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)