Security Office Information Security Analyst Dover

Job Title: Information Security Analyst 1 SOC Analyst

Job ID: 14151
Location: Dover, Delaware 19904
Work Arrangement: Hybrid Up to 3 days per week onsite
Interview Process: Microsoft Teams

We are seeking a motivated and technically skilled Information Security Analyst 1 (Security Operations Center SOC Analyst) to support cybersecurity operations by monitoring security events, investigating potential threats, and responding to security incidents. The ideal candidate will have hands-on experience with SIEM platforms, security alert triage, log analysis, endpoint security, and incident response.

The successful candidate will help identify suspicious activities, analyze security events, mitigate potential threats, and strengthen the organization's overall security posture. This role requires strong analytical and problem-solving skills, attention to detail, and the ability to work effectively in a fast-paced cybersecurity environment.

• Security Monitoring: Monitor network traffic, system logs, endpoints, and security dashboards to identify suspicious activities and potential security threats.

• Alert Triage: Review, validate, prioritize, and investigate security alerts generated by SIEM, EDR, IDS/IPS, and other security tools.

• Incident Response: Investigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access, and potential data breaches.

• SIEM Operations: Utilize SIEM platforms to correlate security events, identify anomalies, investigate alerts, and support threat detection activities.

• Log Analysis: Analyze logs from operating systems, firewalls, network devices, antivirus solutions, and endpoints to identify indicators of compromise.

• Threat Hunting: Conduct proactive threat-hunting activities using SIEM and endpoint security tools to identify hidden threats and suspicious behavior.

• Threat Intelligence: Research emerging cybersecurity threats, vulnerabilities, attack techniques, and indicators of compromise to improve detection capabilities.

• Security Tool Management: Work with security technologies, including SIEM, IDS/IPS, firewalls, antivirus, endpoint detection and response (EDR), and Public Key Infrastructure (PKI).

• Automation and Scripting: Use Python or PowerShell to automate repetitive tasks, support investigations, and improve security operations where appropriate.

• Documentation and Reporting: Maintain accurate incident records, document investigation findings, and prepare security reports in accordance with established procedures.

• Security Improvement: Assist in developing and refining detection rules, incident response procedures, and security monitoring processes.

• Team Collaboration: Collaborate with cybersecurity, network, infrastructure, and IT teams to investigate, contain, and resolve security issues.

• Strong understanding of cybersecurity principles, network security, operating systems, and common network protocols.

• Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, IBM QRadar, or equivalent platforms.

• Experience in security monitoring, alert triage, event correlation, and incident investigation.

• Ability to analyze system, network, firewall, and endpoint logs to identify suspicious activity.

• Working knowledge of incident response processes and security threat mitigation.

• Familiarity with endpoint security, EDR, antivirus, firewalls, and IDS/IPS technologies.

• Understanding of common cyberattacks, including phishing, malware, ransomware, unauthorized access, and account compromise.

• Basic knowledge of threat intelligence, indicators of compromise (IOCs), and attacker tactics and techniques.

• Knowledge of Python or PowerShell scripting for automation and security analysis.

• Basic understanding of computer forensics and digital evidence handling.

• Strong analytical, troubleshooting, communication, and documentation skills.

• Ability to work collaboratively in a fast-paced security operations environment.

• Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, or a related field.

• Relevant cybersecurity certifications, such as CompTIA Security+ or equivalent, are beneficial.

• Work Location: Dover, Delaware 19904

• Work Model: Hybrid, with up to three days per week onsite.

• Interview: Microsoft Teams.

Important Submission Note: This is a repost associated with Posting #13436. Do not submit candidates who were previously submitted under Posting #13436.

Interested candidates should share an updated resume highlighting relevant SOC operations, SIEM, security monitoring, log analysis, and incident response experience.