SOC Analyst-Tier 1 (R-00068)

Position Overview

• Location Type:
• Job Type: Full-Time
• Salary:

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people, and that is what we have built, a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023, True Zero was recognized as a “Best Places to Work” in two categories ("Prosperous and Thriving" ($5MM – $50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)) and in 2022, was recognized as one of Inc. Magazine’s Top 5000 Fastest Growing Companies.

TZT is seeking a highly-motivated and detail-oriented Tier 1 SOC Analyst to join our Security Operations Center (SOC) team. As a Tier 1 SOC Analyst, you will play a crucial role in monitoring, detecting, and responding to security incidents to ensure the protection of our clients' assets. This is an exciting opportunity to work in a fast-paced environment and contribute to the ongoing success of our cybersecurity operations.

As a TZT consultant, the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train, demo, test and grow their professional skills.

Responsibilities

• Perform triage on all security related events.
• Investigate and identify the root cause behind security incidents – to include all stages of the cyber kill chain as appropriate/needed.
• Determine the extent and remediation of security events.
• Refine/improve existing use cases/alerting with Tier 2.
• Perform regular continuous monitoring of events across platforms, operating systems, databases, and management systems.
• Track and communicate reported events for numerous different security platforms, operating systems, databases, and management systems.
• Review existing security events and propose refinements as necessary.
• Improve and implement indicators and protections across platforms, operating systems, databases, and management systems.
• Perform general operational and maintenance tasks for the organization.
• Perform reviews of previously blocked domains/IPs.
• Generate datasets for later analysis by other members of the team.
• Generate reports on a scheduled basis to document findings and remediation efforts, to include recommendations to the system owners.
• Follow defined procedures for metrics generation.
• Provide the first line communication for events into the SOC.
• Handle or escalate emails sent to the SOC.
• Handle or escalate incoming phone calls to the SOC.
• Communicate professionally on all security events should they arise.
• Document a description of each event handled and store the artifacts related to the handling of those events within the ticketing system.
• Work collaboratively with various stakeholders to investigate events of interest and incidents.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field (or equivalent experience preferred).
• Proven experience (2+ years) in a SOC or security-related role, with a focus on incident monitoring, analysis, and response.
• Familiarity with security technologies and tools such as SIEM, IDS/IPS, firewalls, antivirus, and endpoint protection systems.
• Understanding of common network protocols (TCP/IP, DNS, HTTP, etc.) and their role in security monitoring.

Company Information

True Zero Technologies is a veteran-owned small business founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people, and that is what we have built, a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers.

Awards & Recognition:

• 2023: Recognized as a “Best Places to Work” in two categories ("Prosperous and Thriving" ($5MM – $50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)).
• 2022: Recognized as one of Inc. Magazine’s Top 5000 Fastest Growing Companies.

Culture & Benefits:

• Access to the full knowledge base driven by the True Zero community.
• Technical backing of the entire PS team.
• Encouragement of collaboration and growth through information sharing and knowledge workshops.
• Access to internal Slack channel for team connection.
• Necessary tools to train, demo, test, and grow professional skills.