SOC Analyst I

Large rollouts are routine here, such as imaging 12,000 laptops for a state agency over one summer. Tickets live in ConnectWise and everyone logs time to the quarter hour.

Role overview:

We are adding an SOC Analyst I to our Risk and Compliance team. Security analyst role covering detection, incident response and some compliance work. Good fit for someone two or three years into security. This role is fully remote within the US.

Main duties:

• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Check threat intelligence feeds and IOCs against our environment.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.
• Hand off open cases at shift change with clear notes.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.

Required qualifications:

• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Clear written communication for incident tickets and reports.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Basic scripting in PowerShell or Python.

Schedule: Four 10-hour shifts, Sunday to Wednesday, 6:00 AM to 4:30 PM

Compensation: $88,000-$106,000 per year

Compensation and benefits:

• Medical, dental and vision insurance.
• 401(k) with company match.
• 12 weeks of paid parental leave.

Jacksonville IT is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Please include a short note on why this role interests you.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Jacksonville IT.