SOC Security Analyst

Position Summary

This opportunity is presented on behalf of a partner organization seeking a SOC Security Analyst located in the United States. The role involves contributing to a dynamic security operations team focused on safeguarding vital digital assets. Responsibilities include monitoring security events, conducting investigations, and driving incident response improvements within a cloud-based security environment. This hands-on position involves utilizing advanced security tools, collaborating across technical teams, and enhancing organizational cybersecurity posture.

Key Responsibilities

• Continuously monitor, investigate, and address security alerts using SIEM platforms to ensure incidents are thoroughly analyzed and resolved.
• Develop, maintain, and refine SIEM use cases, correlation rules, dashboards, and reports to enhance threat detection capabilities.
• Identify and prioritize critical security events from diverse data streams and escalate them according to defined protocols.
• Analyze security incidents including phishing attempts and coordinate timely response measures.
• Manage security tickets effectively throughout their lifecycle, ensuring comprehensive documentation and timely closure.
• Support proactive threat hunting and detailed security investigations as required.
• Communicate findings, risks, and recommendations to stakeholders to support SOC operations.
• Create and update security documentation such as standards, procedures, and operational runbooks.
• Collaborate with system and application owners to assist in vulnerability remediation activities.

Candidate Profile and Requirements

• Minimum of two years’ experience in security operations, incident response, or related cybersecurity roles, preferably with SOC analyst background.
• Practical experience utilizing SIEM tools like Splunk, Microsoft Sentinel, Elastic, or QRadar for alert investigation, detection tuning, and report generation.
• Knowledge in analyzing phishing incidents and managing email security responses.
• Capable of independently triaging, investigating, and escalating incidents using established playbooks.
• Solid understanding of networking fundamentals including TCP/IP, DNS, HTTP/S, and familiarity with Windows and Linux environments.
• Experience with case management systems and maintaining precise, audit-ready documentation.
• Strong communication skills to clearly explain technical details to diverse audiences.
• Ability to work autonomously within a collaborative security team setting.
• Must be a U.S. citizen capable of passing mandated background checks.
• Preferred certifications include CySA+, GCIH, GCIA, Security+, or BTL1.
• Additional experience with EDR, IDS/IPS, vulnerability scanning, scripting (Python, PowerShell, Bash), SOAR platforms, and threat intelligence is advantageous.

Compensation and Working Conditions

• Competitive hourly pay ranging from $65 to $75.
• Part-time engagement averaging about 25 hours weekly.
• Flexible remote work arrangement within the United States.
• Opportunity to engage with cutting-edge cybersecurity operations and threat detection initiatives.
• Exposure to innovative security technology and investigative methodologies.
• Work within a supportive, improvement-focused team culture.

Additional Information

The recruitment process utilizes AI tools for candidate matching to ensure swift, unbiased consideration. The partner company handles final assessments and decision-making. Applicants must authorize processing of their personal data in compliance with relevant privacy regulations. For transparency, AI assists recruitment staff but hiring decisions remain human-led.