JobsCyber SecuritySan JoseSOC Analyst I
Sherwood Design Engineers
Posted yesterday
SOC Analyst I
Sherwood Design Engineers · San Jose, California, United States
SAVE THIS JOB
In short
The SOC Analyst I is responsible for monitoring, triaging, and investigating security alerts across organizational platforms. They assist in incident response activities and collaborate with senior staff to protect assets and improve security operations.
What they're looking for
MUST-HAVE SKILLS
ALSO MENTIONED
Candidates should have a foundational understanding of cybersecurity principles, networking, and Windows operating systems. Proficiency or exposure to Microsoft security tools and relevant certifications like CompTIA Security+ or Microsoft SC-200 are highly preferred.
About the employer
Sherwood Design Engineers
A site civil engineering practice committed to the optimal integration of ecology, infrastructure, and design.
Sherwood Design Engineers is a site civil engineering practice committed to the optimal integration of ecology, infrastructure, and design. Our headquarter is in San Francisco with Offices and Studios located in San Francisco, New York, Atlanta, Los Angeles, Petaluma, and Santa Cruz. We specialize in water management strategies and water resources engineering. We document site infrastructure as well as master plan engineering solutions at a campus, neighborhood, and district scale. Important to our engineering practice is our ability to span building and landscape. Sherwood works collaboratively with project teams to find ways to maximize efficiencies through an integrated and ecological approach that results in high performance buildings and landscapes recognized for function as well as aesthetics and user experience.
- INDUSTRY
- Civil Engineering
- COMPANY
- Privately Held
- HEADQUARTERS
- San Francisco, California
- SIZE
- 51-200
- OFFICES
- 6 on LinkedIn
Is your LinkedIn profile ready for roles like this?
A free review of your profile, scored against what Security roles ask for, and what to fix first.
Questions about this role
- Is this Sherwood Design Engineers role remote?
- Tagged on site.
- Does it sponsor visas?
- Listed as no visa sponsorship.
- What experience does it ask for?
- Listed as 0-2 years.
The posting, in full
Position Summary The SOC Analyst I is an entry-level cybersecurity professional responsible for monitoring, triaging, and investigating security alerts across the organization's security platforms. This role serves as the first line of defense within the Security Operations Center (SOC), performing initial incident analysis, escalating potential threats, and assisting with incident response activities. The analyst will work closely with senior analysts, engineers, and IT teams to protect organizational assets and improve security operations.
▶ READ THE FULL POSTING▼ CLOSE THE FULL POSTING
Position Summary The SOC Analyst I is an entry-level cybersecurity professional responsible for monitoring, triaging, and investigating security alerts across the organization's security platforms. This role serves as the first line of defense within the Security Operations Center (SOC), performing initial incident analysis, escalating potential threats, and assisting with incident response activities. The analyst will work closely with senior analysts, engineers, and IT teams to protect organizational assets and improve security operations.
Key Responsibilities
- Security Monitoring & Alert Triage:
- Monitor security alerts and incidents generated by Microsoft Defender XDR, Microsoft Sentinel, and other security tools.
- Perform initial triage and validation of security events.
- Investigate common security threats, including phishing, malware, unauthorized access attempts, and suspicious user activity.
- Escalate high-risk or complex incidents to senior analysts.
- Incident Response Support:
- Assist in identifying, containing, and documenting security incidents.
- Collect and analyze evidence from endpoints, identity systems, email security tools, and cloud environments.
- Follow established incident response procedures and playbooks.
- Log Analysis:
- Review and analyze Windows Event Logs, Microsoft Entra ID sign-in logs, Microsoft 365 audit logs, Microsoft Defender telemetry, network logs, and firewall logs.
- Correlate information across multiple data sources to identify potential threats.
- Microsoft Security Operations:
- Review alerts from Microsoft Defender XDR and perform basic investigations using Microsoft Sentinel.
- Execute basic KQL queries for incident analysis and assist with security monitoring and detection validation.
- Threat Intelligence & Hunting:
- Search for Indicators of Compromise (IOCs).
- Review threat intelligence provided by the security team and assist in basic threat hunting activities.
- Documentation & Reporting:
- Maintain accurate incident records and case notes.
- Document investigative findings and remediation activities.
- Contribute to knowledge base articles and operational procedures.
Required Qualifications & Skills
- Technical Knowledge:
- Understanding of cybersecurity fundamentals (Confidentiality, Integrity, and Availability [CIA], attack lifecycle, phishing and social engineering attacks, MITRE ATT&CK Framework).
- Basic networking knowledge (TCP/IP, DNS, DHCP, HTTP/HTTPS).
- Basic Windows operating system knowledge.
- Familiarity with Microsoft 365 and cloud security concepts.
- Security Tools: Experience or exposure to Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Entra ID, Microsoft Intune, and SIEM/EDR technologies.
- Desired Skills: Analytical and problem-solving skills, strong attention to detail, ability to follow established procedures, ability to work in a fast-paced security environment, and strong written and verbal communication skills.
- Preferred Certifications: CompTIA Security+, Microsoft SC-900, Microsoft SC-200 (or actively pursuing), Microsoft AZ-900, or ISC2 Certified in Cybersecurity (CC).
- Role Logistics: Reports to the Security Operations Lead; categorized as an Entry-Level Security Operations Analyst (L1).