The Junior SOC Analyst (L1) serves as the first line of defense in the Security Operations Center, responsible for monitoring, triaging, and escalating security alerts across the organization’s IT environment. This role is ideal for individuals eager to grow in cybersecurity, offering hands-on experience in threat detection and incident response within a fast-paced, 24/7 operational setting.

Key Responsibilities

Continuously monitor SIEM platforms, IDS/IPS, EDR, and other security tools (i.e. Phishing alerts) for suspicious activity.
Perform initial triage of alerts to assess severity, urgency, and potential impact.
Escalate verified incidents to Level 2 analysts or Incident Response teams following established SOPs and playbooks.
Document incidents, investigation steps, and findings accurately in ticketing systems.
Assist with SIEM rule tuning under senior analyst and leadership guidance.
Maintain situational awareness of the organization’s IT landscape and emerging threats.
Participate in daily SOC operations, including shift handovers and other security operations tasks as needed.

Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent practical experience.
Basic understanding of networking fundamentals (TCP/IP, DNS, firewalls, VPNs) and common attack vectors (malware, phishing, ransomware).
Familiarity with SIEM tools (e.g., Splunk, Sentinel, QRadar) and endpoint security solutions.
Strong analytical and problem-solving skills with attention to detail.
Ability to work in a fast paced 24x7 environment with rotational on-call coverage.
Excellent written and verbal communication skills.

Preferred Qualifications

Certifications such as CompTIA Security+, CySA+, or equivalent.
Experience with log analysis, endpoint detection tools, and ticketing systems (e.g., ServiceNow, Jira).

This is a full-time, onsite position working for an ambler based team.

Work site Location: Dallas, TX or Cincinnati, OH

Affinity HealthCare Solutions

New Jobs

JR. SOC Analyst (Level 1)