SOC Analyst Tier 1

Jfl Consulting, Llc
Springfield, VA, United States
14 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
2 years minimum
Compensation
$65,000.0 - $100,000.0
Working hours
Shift work

Tech stack

JIRA Cyber Security Event Logging Log Analysis Security Information and Event Management Computer Network Operations Mitre Att&ck SC Clearance Information Technology Servicenow

Job description

  • Monitor SIEM dashboards and security tooling alerts
  • Serve as the initial triage for all incoming customer calls, alerts, emails, and tickets using established playbooks to categorize, prioritize, and route
  • Create detailed tickets for all confirmed or suspected events
  • Perform initial investigation steps such as IP lookups, hash lookups, IOC Correlation
  • Escalate threats that exceed Tier 1 response authority to Tier 2 within established guidelines
  • Close false positives with appropriate documentation
  • Contribute to playbook improvements by flagging outdated or incorrect procedures
  • Participate briefings and training sessions
  • Maintain the SOC Event log for all events during the shift
  • Maintain situational awareness of the threat landscape and active campaigns
  • Participate briefings and training sessions

Requirements

  • Bachelor’s degree in Cyber Security, Information Technology, Computer Science, Information Security, or related field. In lieu of degree, 2+ years of experience in a SOC, NOC, IT security, or network operations role
  • One of the following certifications, equivalent or better: Sec+, CYSA+, GSEC; or the ability to obtain the certification within 60 days.
  • Basic understanding of networking and security concepts
  • Basic understanding SIEM platforms and log analysis
  • Ability to work shifts including nights, weekends, and holidays on rotating schedule, * Active Secret clearance preferred but not required
  • Understanding of MITRE ATT&CK framework
  • Experience with ticketing systems (ServiceNow, Jira, or equivalent)

Benefits & conditions

  • Salary: $65k- $100k
  • 100% employer-paid medical, dental, and vision premiums for employees and dependents
  • Flexible Spending Accounts (healthcare, dependent care, and commuter)
  • Life insurance, short-term disability and long-term disability
  • 401(k) with immediate vesting of company contribution
  • Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)
  • We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms, $65k- $100k

About the company

With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients.

Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.clearancejobs.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:07 min

Summarizing critical actions for organizational cybersecurity compliance readiness

Matthew Brady Matthew Brady · WWC Europe 2026

11:18 min

Addressing audience questions on security and microservice architectures

Reinhard Kugler · LIVE

56 sec

Integrating automated approval workflows into the portal

Markus Eisele Markus Eisele · WWC 2025

3:05 min

Integrating an assistant application with Jira software

Felix Augenstein · LIVE

3:48 min

Leveraging multi-agent systems for autonomous software testing

Ondřej Gróf Ondřej Gróf · WWC Europe 2026

2:27 min

Establishing a simulated technical environment for the workflow demo

Tobias Dunn-Krahn · LIVE

Videos

See all

Related articles

See all