SOC Analyst (Tier 1 Security Operations)

About the role

The SOC Analyst works in the Technology team as a Tier 1 security operations analyst, monitoring and triaging alerts across ARI’s enterprise IT and OT environments. This hybrid position is primarily remote, with occasional on‑site attendance as needed.

Key responsibilities

• Monitor security alerts from Microsoft Sentinel, Defender XDR, Entra ID and related tools during U.S. business hours.
• Tri­age alerts using documented playbooks, validate, classify, gather context, and resolve, suppress, or escalate incidents.
• Open, maintain and close incident tickets in Jira Service Management with audit‑quality documentation.
• Handle phishing reports, contribute to detection tuning, and maintain SOC runbooks.
• Support routine security tasks such as account access reviews, certificate tracking and vulnerability triage.
• Participate in tabletop exercises, post‑incident reviews and coordinate with the external MSSP.

Required profile

• 1–3 years of experience in a SOC, IT security operations or related IT support role.
• Bachelor’s degree in Cybersecurity, IT or equivalent experience.
• Strong documentation discipline and clear written/oral communication under pressure.
• Comfortable working in a remote‑first environment with clear handoffs.

Required skills

• Microsoft Sentinel
• Microsoft Defender XDR
• Microsoft Entra ID
• Microsoft Purview
• Jira Service Management (ITSM)
• Fundamental networking concepts (TCP/IP, DNS, HTTP/S, VPN)
• Windows and macOS endpoint knowledge