> Markdown version of [/jobs/ext/1238417-incident-handler-tier-i](https://www.wearedevelopers.com/jobs/ext/1238417-incident-handler-tier-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Handler Tier I

- **Company:** Arsiem Corporation
- **Location:** Monterey, CA, United States
- **Experience:** Starter
- **Salary:** $82,000.0 - $91,000.0
- **Contract:** Permanent contract
- **Skills:** Access Control List, Access Network, Cyber Security, Email Filtering, Issue Tracking Systems, Intrusion Detection Systems, Network Monitoring, Open Source Technology, Security Software, Security Information and Event Management, Software Engineering, Firewalls (Computer Science), Information Technology, Palo Alto Networks, Splunk
- **Published:** July 11, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9024985/incident-handler-tier-i

## About the Role

* Minimum of one (1) year of professional experience in ANY of the following: network or UNIX/Linux system administration, software engineering, software development, AND/OR a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, OR related field.
 * Certification: Sec+
 * Must obtain one of the following certificates within 6 months of hire date: CompTIA CySA+, EC-Council CEH, GIAC GCIA, Microsoft AZ 900, Palo Alto Networks PCCET, Splunk Core Certified Advanced Power User

## Description

* Use the SIEM tool to receive security alerts, perform initial investigations, and provide damage assessments based on findings
 * Review the latest alerts/events from various sensors to determine relevancy and urgency.
 * Enrich incidents with open source and/or other sources of information to handle incidents accurately.
 * Appropriately document all alerts/incidents in the approved ticketing system.
 * Analyze and elevate as appropriate for IHT2 review.
 * Preserve evidence integrity according to CSOC standard operating procedures or national standards.
 * Monitor network activity using cybersecurity tools to protect against malware. (Endpoint protection, restrict/prevent external devices, spam filters, Network access controllers, ACLs)
 * Recognize and categorize types of vulnerabilities and associated attacks (threat hunting and sharing)
 * Use CSOC security tools to Identify, capture, contain, and report on malware-related activity
 * Provide feedback to improve techniques and procedures used for detecting host and network-based intrusions
 * Use CSOC SOPs/procedures and suggest recommendations to fine-tune these processes to Tier 2 analyst
 * Handle incident handling tasks from Tier 2 analysts, CSOC manager and leadership
 * Handle other tasks that a Tier 1 level of experience and talent can complete.
 * Under supervision, may manage and configure security monitoring tools (SIEM, IDS, Firewall, Access Control Lists, etc.) to mitigate existing threats/vulnerabilities.


## Related Videos

- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)