SOC Analyst I (Remote)

This a Full Remote job, the offer is available from Georgia (USA), North Carolina (USA) Who is Trace3? Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate. Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it! Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco. Ready to discover the possibilities that live in technology? Come Join Us! Street-Smart - Thriving in Dynamic Times We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and Hirevector-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems. Juice - The “Stuff” it takes to be a Needle Mover We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like. Teamwork - Humble, Hungry and Smart We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.

About the Role

The SOC Analyst I is responsible for monitoring, analyzing, and responding to security alerts and incidents within the Security Operations Center. This role serves as the first line of defense, identifying potential threats, conducting initial investigations, and escalating incidents in accordance with defined procedures. While the SOC Analyst I operates within established playbooks and workflows, the role requires analytical thinking, technical judgment, and the ability to assess risk and impact in real time.

What You'll Do

• Monitor and analyze security alerts and events generated by SIEM, EDR, IDS/IPS, firewall, and cloud security tools to identify potential security incidents and determine appropriate response actions.
• Perform initial triage and investigation of security events, assessing severity, scope, and potential business impact using defined escalation criteria and professional judgment.
• Execute initial containment and remediation actions in accordance with established incident response playbooks, including account containment, endpoint isolation, and malicious artifact blocking, while ensuring actions are documented.
• Analyze security logs and telemetry across endpoints, servers, network devices, and cloud environments to identify anomalies, suspicious behavior, or indicators of compromise.
• Investigate phishing and email-based threats, including header analysis, link inspection, and attachment detonation, and recommend appropriate response actions.
• Document incident details, investigation steps, and outcomes in ticketing systems and case management platforms to ensure accurate records and effective handoff to Tier 2 analysts.
• Collaborate with senior SOC analysts, incident response teams, and engineering resources to support deeper investigations, remediation activities, and incident resolution.
• Support IT Leadership in providing information as it relates to security and compliance topics.
• Maintain awareness of emerging threats, vulnerabilities, and attacker techniques, and contribute observations or improvement suggestions related to detections and response processes.

Qualifications

• 2+ years of experience in a Security Operations Center, IT security role, helpdesk, or technical support environment.
• Familiarity with security monitoring tools such as SIEM platforms (e.g., Splunk, Sentinel) and EDR solutions (e.g., CrowdStrike, SentinelOne).
• Basic understanding of networking concepts, including TCP/IP, DNS, firewalls, and common protocols.
• Knowledge of common cyber threats and attack vectors, such as phishing, malware, credential compromise, and ransomware.
• Experience using ITSM or ticketing systems (e.g., ServiceNow, ConnectWise, FreshService).
• Ability to analyze alerts and technical data, apply judgment, and follow defined escalation procedures.
• Strong written and verbal communication skills, with an emp Apply To this Job