Tier 1 SOC Analyst

Dragonfli Group

Tier 1 SOC Analyst monitoring SIEM and EDR alerts for Dragonfli Group’s federal and Fortune 100 cybersecurity clients. Triaging incidents, tracking vulnerabilities, and escalating overnight events.

Posted 8/12/2026contractRemote • District of Columbia, Virginia, Washington • 🇺🇸 United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates proficiency in monitoring SIEM alerting and EDR alerts, with a solid understanding of incident lifecycle management. Capable of maintaining accurate documentation and communication while supporting security operations in a collaborative environment.

Highest-signal resume keywords

SIEM AlertingEDR Alert TriageIncident Lifecycle ManagementMicrosoft SentinelSecurity+ Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security OperationsNetworking FundamentalsOperating System FundamentalsBasic ScriptingVulnerability Management

Soft Skills

Clear Written CommunicationDisciplined Documentation

Tools & Technologies

SplunkCrowdStrikeTenable

Certifications & Qualifications

Security+

Industry Keywords

Incident DetectionTriageContainmentEscalationShift Logs

Tech Stack

Tools & technologies

LinuxMacOSPythonSplunk

About the role

Key responsibilities & impact

Monitor SIEM alerting, such as Microsoft Sentinel or Splunk, and triage events by severity against established runbooks
Review and action endpoint detection and response (EDR) alerts across client tenants
Track and validate Tenable vulnerability findings and route them into the correct workflow
Escalate incidents through the defined path with clear, documented handoffs
Open, update, and close tickets with accurate, auditable notes
Maintain clean shift logs
Communicate with clients and the on-call lead during overnight events
Follow and help improve standard operating procedures
Flag detection gaps and tuning opportunities
Support monthly reporting with accurate event and response data

Requirements

What you’ll need

Ability to pass a drug screening and a full background investigation, including verification of references, employment history, education, and certifications
0–2 years of experience in security operations, IT, or a related technical field
Working knowledge of SIEM alerting and EDR alert triage concepts
Solid networking and operating-system fundamentals across Windows, macOS, and Linux
Understanding of the incident lifecycle: detection, triage, containment, and escalation
Ability to work overnight shifts reliably on a rotation that includes weekends
Clear written communication and disciplined documentation habits
U.S. Citizenship or Permanent Residency is required
If hired, all work related to this role must be performed within the continental U.S.
Preferred: Hands-on exposure to Microsoft Sentinel, Splunk, CrowdStrike or comparable EDR, and Tenable
Preferred: Security+ or a similar entry-level security certification
Preferred: Basic scripting for triage or automation using Python or PowerShell
Preferred: Coursework, internship, or lab experience in a SOC or IT security environment
Preferred: Residency in the Hampton Roads through Richmond, VA corridor

Benefits

Comp & perks

Medical – Multiple POS health plan options including an HSA-compatible plan
Dental – PPO coverage for preventive, basic, and major services
Vision – Annual exam, frames, lenses, and contact lens allowance
401(k) – Employer match up to 5% of eligible compensation
Long-Term Disability – 100% employer-paid coverage at 50% of pre-disability earnings
Life Insurance & AD&D – 100% employer-paid coverage valued at $10,000 each
PTO – 15–25 days annually based on tenure
Paid Federal Holidays – All 11 federal holidays observed