The Role
Triage and analyze security alerts from SIEM, CSOC, and other monitoring sources; document indicators, assess threats, and escalate incidents to Tier 2. Support incident response procedures, threat intelligence, AI/ML-based detection, SOC automation, and cybersecurity enhancements. The role also monitors emerging threats and collaborates with operations and security teams. Candidates need at least one year of IT operations and security experience and must obtain a Public Trust clearance.
Summary Generated by Built In
Overview
- Tier One Technologies is looking for a Tier1 Threat Management Specialist to support our US Government client.
- This hybrid contract-to-hire position can be originated in Falls Church, VA; Raleigh, NC or Eagan, MN.
- SELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT.
- Receive and triage security alerts from multiple sources, including SIEM platforms, CSOC mailboxes, and direct phone notifications, following established playbooks, SOPs, and incident response procedures.
- Escalate security events to Tier 2 following initial triage, providing detailed findings and recommendations, including opportunities to leverage Artificial Intelligence (AI), Machine Learning (ML), and Security Orchestration, Automation, and Response (SOAR) capabilities to improve CSOC efficiency and accuracy.
- Identify security issues and vulnerabilities that may require mitigating controls or additional defensive measures.
- Analyze and interpret outputs from SIEM platforms, CSOC mailboxes, and other security monitoring sources to identify potential security incidents and determine appropriate response actions.
- Collect and document key information to support security analysis, including IP addresses, geographic locations, affected assets, user information, and other relevant indicators.
- Escalate events requiring additional investigation to appropriate members of the Threat Management team while ensuring accurate documentation and timely communication.
- Execute operational processes and established response procedures in support of identified security incidents.
- Utilize AI/ML-based tools and techniques to detect anomalies, automate incident triage, identify emerging threats, and enhance threat intelligence capabilities.
- Analyze threat intelligence to assess security risks, identify emerging threats and threat actor activity, and adapt defensive measures using ML-enhanced tools and techniques.
- Monitor emerging cybersecurity trends, threat actors, attack techniques, and AI/ML research to identify opportunities for improving security operations.
- Identify and support automation use cases, including AI/ML-driven solutions designed to enhance SOC monitoring, detection, triage, and incident response capabilities.
- Collaborate with cross-functional Operations and cybersecurity teams to implement SOC enhancements through automation, AI/ML, and other emerging security technologies.
- BA or BS degree in Computer Science, Information Technology or related field or 4 additional years of related experience in lieu of degree.
- One or more relevant certifications such as CEH, CISSP, CompTIA Security+, or GCIH are advantageous.
- 1+ years of experience in IT Operations.
- 1+ year experience in IT Security.
- Working knowledge of Platform Security Basics, Threat Lifecycle Management, TCP / IP and Incident Management.
- Familiarity with Control Frameworks and Risk Management techniques.
- Familiarity with the application of AI/ML techniques in cybersecurity, including but not limited to automated threat detection, incident response automation, and predictive analytics.
- Familiarity with cloud security (AWS, Azure, GCP).
- Understanding and experience identifying and implementing automation use cases.
- Experience in evaluating the effectiveness of AI/ML solutions in a SOC environment is a PLUS.
- Strong interpersonal and organizational skills
- Excellent communication skills.
- Must be able to obtain a Position of Public Trust Clearance.
- All candidates must be a US Citizens or have a Permanent US Residence status (Green Card).
- Candidate must have lived in the United States for the past 5 years.
- Cannot have more than 6 months travel outside the United States within the last 5 years. Military Service excluded.
Skills Required
- Bachelor’s degree in Computer Science, Information Technology, or a related field, or four additional years of related experience in lieu of a degree
- At least 1 year of IT Operations experience
- At least 1 year of IT Security experience
- Working knowledge of platform security basics, threat lifecycle management, TCP/IP, and incident management
- Familiarity with control frameworks and risk management techniques
- Familiarity with AI/ML techniques in cybersecurity, including automated threat detection, incident response automation, and predictive analytics
- Familiarity with cloud security, including AWS, Azure, or GCP
- Understanding and experience identifying and implementing automation use cases
- Must be able to obtain a Position of Public Trust clearance
- Must be a U.S. citizen or permanent U.S. resident
- Must have lived in the United States for the past 5 years
- Cannot have more than 6 months of travel outside the United States within the past 5 years, excluding military service
- Relevant certification such as CEH, CISSP, CompTIA Security+, or GCIH
- Experience evaluating AI/ML solutions in a SOC environment
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Tier One Technologies is a national technical consulting, recruiting, and IT contracting firm serving primarily federal, state, and local government clients. It staffs IT professionals and provides software application management and development, business analysis, quality assurance, systems and network engineering, business intelligence, web services, infrastructure and security management, cybersecurity, and related administrative support for mission-critical work across civilian, defense, intelligence, and security sectors.
