Security Analyst I (SOC)

About the role

An entry-level Security Analyst role on the security operations team of a state government agency. You will serve as a first line of defense, monitoring SOC dashboards and security tools, triaging alerts, analyzing logs, reviewing vulnerabilities and documenting incidents. A great opportunity to build a strong foundation in threat detection, incident response and SOC operations. Remote within Wisconsin or in-office in Madison.

Responsibilities

• Monitor SOC tools such as SIEM, DLP and web application firewalls for operational health and proper log ingestion
• Monitor real-time security dashboards and system logs and perform initial alert triage
• Distinguish false positives from legitimate security events, escalating as needed
• Review routine vulnerability scan results and help track known weaknesses across assets
• Document security events, investigations and remediation steps in the ticketing system
• Resolve and close tickets according to standard operating procedures
• Escalate complex or high-priority threats to senior SOC staff with clear briefing notes
• Collaborate with IT, system administration and other teams during investigations and incident resolution