SOC Analyst Junior

Assists in ensuring the security of the DHMS program's information systems, networks, and data through monitoring, detecting, investigating, analyzing, and responding to cybersecurity incidents and implementing protective measures. Works closely with IT, operations, compliance, and risk management teams to comply with DHMS IT cybersecurity requirements, policies, and best practices. Possesses fundamental understanding of cybersecurity principles and training or experience in security tools (e.g., firewalls, IDS/IPS), conducting security assessments, developing and implementing mitigation strategies, and incident response. Capable of developing documentation and knowledge of data security best practices. Must have good problem-solving, analytical, communication, and interpersonal skills and the ability to manage multiple tasks effectively. Demonstrates attention to detail, organizational skills, and ability to work independently and as part of a team.

• Key Responsibilities

  • Monitor security information and event management (SIEM) queues and alerts from firewalls, intrusion detection and prevention systems, and endpoint security tools to identify potentially suspicious activity.
  • Perform initial alert triage by reviewing severity, affected assets, user activity, and supporting evidence to distinguish potential threats from false positives.
  • Review and correlate network, endpoint, and authentication logs to identify suspicious patterns and establish preliminary incident scope and timelines.
  • Follow incident response playbooks, perform authorized initial response actions, and escalate suspected or confirmed incidents with relevant evidence and clear investigation notes.
  • Assist senior analysts with security assessments, documentation of identified weaknesses, and implementation and verification of approved mitigation measures.
  • Maintain accurate incident records covering affected systems, indicators of compromise, investigative steps, response actions, and disposition while following sensitive-data handling requirements.
  • Coordinate with IT, operations, compliance, and risk management teams to support security requirements, communicate findings, and track assigned corrective actions.

  Required Qualifications

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field
  • 0–3-years experience in cybersecurity, systems security, or related IT security activities; relevant training or supervised practical experience may support entry-level readiness
  • Foundational knowledge of cybersecurity principles, common attack methods, indicators of compromise, and safeguards supporting information confidentiality, integrity, and availability
  • Foundational ability to review security alerts and logs, follow incident response procedures, and recognize when findings require escalation to senior analysts
  • Strong analytical, problem-solving, written communication, and organizational skills, including the ability to document technical findings accurately and manage multiple assigned tasks
  • Must have current Secret clearance
  • Must be a U.S. citizen

  Preferred Qualifications

  • Hands-on training or supervised experience using SIEM, firewall, intrusion detection and prevention, or endpoint security tools.
  • Experience assisting with security assessments, mitigation verification, or incident documentation in a regulated IT environment.
  • Familiarity with coordinating security activities across IT, operations, compliance, and risk management teams.