> Markdown version of [/jobs/ext/1790580-security-analyst-1](https://www.wearedevelopers.com/jobs/ext/1790580-security-analyst-1). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst 1

- **Company:** Spectraforce
- **Location:** United States (Remote available)
- **Contract:** Internship / Graduate position
- **Skills:** Microsoft Windows, Amazon Web Services, JIRA, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Dynamic Host Configuration Protocol, Linux, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Infrastructure as a Service (IaaS), Internet Control Message Protocol, Issue Tracking Systems, Log Analysis, Networking Basics, Network Monitoring, Network Protocols, Platform as a Service (PAAS), Cloud Services, Phishing, Security Information and Event Management, TCP/IP, Mitre Att&ck, QRadar, Generative AI, Malware, Firewalls (Computer Science), Containerization, Kubernetes, Ddos, Splunk, GPT, Event Viewer, Docker, Servicenow
- **Published:** July 15, 2026
- **Apply:** http://leoforce.us/Careers/Spectraforce/JobDetails.html?jobid=71b32da1-ac5a-4b0e-b504-6c86117b3be0&OrgId=1&UserId=2586

## About the Role

* 1+ years of experience in IT or security operations (internships or bootcamps acceptable)
 * Basic understanding of networking protocols and operating systems
 * Basic understanding of incident response phases
 * Awareness of common indicators of compromise (IOCs).
 * Familiarity with ticketing systems and escalation procedures.
 * Networking Basics: TCP/IP, DNS, DHCP, HTTP/S, ICMP
 * Security Concepts: CIA triad, types of malware, phishing, brute force, DDoS
 * Operating Systems: Basic Windows (Event Viewer, Task Manager), Linux (top, ps, netstat)
 * Security Tools:
 * SIEM: Splunk (basic search), IBM QRadar (offense monitoring)
 * AV/EDR: Windows Defender, CrowdStrike
 * Ticketing: ServiceNow, Jira
 * Familiarity with SIEM tools and log analysis
 * Cloud platforms: Basic AWS/Azure console navigation, understanding of cloud service types (IaaS, PaaS, SaaS)
 * Basic understanding of containerization concepts (Docker, Kubernetes fundamentals)
 * Strong attention to detail and documentation skills
 * GenAI tools: ChatGPT or similar for threat research assistance, automated report summarization
 * Foundational security certifications (e.g., Security+, Network+, CySA+, GSOC) or pursuing certification

## Description

* You will be the first point of contact for triaging security alerts and will engage more senior analysts and management as required
 * Correlate data from SIEM, EDR, and firewall logs
 * Perform basic log analysis and escalate suspicious activity
 * Follow standard operating procedures and escalate issues or improvement opportunities as needed.
 * Map basic security incidents to MITRE ATT&CK tactics during documentation
 * Identifies and escalates issues related to data privacy.
 * Document incidents in ticketing systems
 * Support endpoint and network monitoring activities
 * Participate in shift handovers and daily SOC briefings
 * Security Monitoring: Understands basic alert types and can triage low-level events
 * Security Operations: Follows established SOC procedures and documents findings
 * Incident Escalation: Recognizes when to escalate alerts to senior analysts


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking](https://www.wearedevelopers.com/videos/1331-wearedevelopers-live-chrome-for-sale-comet-the-upcoming-perplexity-browser-stealing-and-leaking)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Micro-frontends anti-patterns](https://www.wearedevelopers.com/videos/299-micro-frontends-anti-patterns)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)