Note: The job is a remote job and is open to candidates in USA. Apollo Information Systems is a cybersecurity services company delivering security and compliance programs through managed security, advisory, assessment, incident response, and offensive security services. The SOC Analyst I monitors, analyzes, and responds to security events and alerts across client networks and systems, documents incidents, supports security procedures and reporting, and collaborates on SIEM correlation rule development.
Responsibilities
- Monitor security events and alerts using SIEM tools and other security technologies
- Analyze and triage security alerts to determine severity and potential impact
- Perform initial incident response activities and escalate issues when necessary
- Document and track security incidents and their resolutions
- Assist in creating and maintaining security documentation and procedures
- Contribute to the development and improvement of security metrics and reporting
- Collaborate with other team members and departments to address security concerns
- Partner with SOC Analyst II to develop and refine SIEM correlation rules
- Stay informed about emerging threats and security trends
- Complete onboarding to Apollo's SOC tool stack
- Shadow senior analysts across monitoring shifts to internalize Apollo's alert triage logic, escalation thresholds, severity classifications, and incident documentation standards before owning work independently
- Begin monitoring and triaging low-complexity alerts under guidance
- Monitor and triage security alerts independently during assigned shifts
- Produce clean, accurate incident documentation consistently
- Demonstrate growing familiarity with the MITRE ATT&CK framework
- Participating in shift handoffs, flagging emerging patterns to Analyst IIs, and raising questions that improve the team's collective awareness
- Carry a full monitoring workload independently across assigned shifts with sound, consistent triage judgment
- Partner actively with SOC Analyst IIs on SIEM correlation rule development
- Draft or meaningfully improve at least one SOC procedure document, runbook, or triage playbook that gets adopted by the team
- Demonstrate working proficiency with at least one SIEM platform beyond basic alert consumption
Skills
- Basic understanding of networking concepts, protocols, and security principles
- Familiarity with common security tools and technologies (e.g., firewalls, IDS/IPS, SIEM)
- Strong analytical and problem-solving skills
- Excellent written and verbal communication skills
- Ability to work in a fast-paced environment and handle multiple priorities
- Basic scripting or programming skills (e.g., Python, PowerShell)
- Ability to work in shifts, including swings, nights, weekends, and holidays
- Experience with CrowdStrike, Sophos, and/or SentinelOne platforms
- Familiarity with one or more SIEM platforms (e.g., Stellar, Splunk, Exabeam, LogRhythm, Elastic)
- Experience with cloud security concepts and technologies
- Experience with threat intelligence platforms and processes
- Familiarity with the MITRE ATT&CK framework
- Familiarity with network infrastructure and security concepts (firewalls, VPNs, network segmentation, IDS/IPS)
- Experience with enterprise firewall platforms (e.g., Sophos, Fortinet, Cisco, Check Point)
Benefits
- Comprehensive medical, dental, and vision coverage, with the company covering 100% of employee premiums and 90% of dependent premiums on base plans
- Unlimited PTO, 7 paid sick days, and 11 paid holidays
- 401(k) with 4% company match after 90 days, immediately vested
- Company-paid life insurance at 1x annual salary
- Company-paid Short-Term Disability (STD) and Long-Term Disability (LTD) coverage
- $125 monthly home-office tech stipend for internet, equipment, and other technology needs
- A primarily remote work arrangement
- Amazing colleagues, a collaborative environment, and a supportive, growth-focused culture
Company Overview