Threat Management Specialist – Tier1 (Hybrid)

Careers Tier1, Falls Church, VA

What you will do

Receive and triage security alerts from multiple sources, including SIEM platforms, CSOC mailboxes, and direct phone notifications, following established playbooks, SOPs, and incident response procedures.
Escalate security events to Tier 2 following initial triage, providing detailed findings and recommendations, including opportunities to leverage Artificial Intelligence (AI), Machine Learning (ML), and Security Orchestration, Automation, and Response (SOAR) capabilities to improve CSOC efficiency and accuracy.
Identify security issues and vulnerabilities that may require mitigating controls or additional defensive measures.
Analyze and interpret outputs from SIEM platforms, CSOC mailboxes, and other security monitoring sources to identify potential security incidents and determine appropriate response actions.
Collect and document key information to support security analysis, including IP addresses, geographic locations, affected assets, user information, and other relevant indicators.
Escalate events requiring additional investigation to appropriate members of the Threat Management team while ensuring accurate documentation and timely communication.
Execute operational processes and established response procedures in support of identified security incidents.
Utilize AI/ML-based tools and techniques to detect anomalies, automate incident triage, identify emerging threats, and enhance threat intelligence capabilities.
Analyze threat intelligence to assess security risks, identify emerging threats and threat actor activity, and adapt defensive measures using ML-enhanced tools and techniques.
Monitor emerging cybersecurity trends, threat actors, attack techniques, and AI/ML research to identify opportunities for improving security operations.
Identify and support automation use cases, including AI/ML-driven solutions designed to enhance SOC monitoring, detection, triage, and incident response capabilities.
Collaborate with cross-functional Operations and cybersecurity teams to implement SOC enhancements through automation, AI/ML, and other emerging security technologies.

Threat Management Specialist – Tier1 (Hybrid)

Threat Management Specialist – Tier1 (Hybrid)

The role

What you will do

What you need

Similar jobs at other companies

Cyber Security Operations Specialist - Tier 2

Cyber Security Operations Specialist Tier 3

Cybersecurity Operations Specialist 720

Senior Threat Intelligence Engineer

Senior Security/Threat Engineer

Senior Security Architect-HYBRID Onsite 3 days per week in D.C.

Interview questions

Careers Tier1