Security Operations Center Analyst Full Time

Cybersecurity – SOC Analyst – L2 (Threat Detection & Response)

Role: SOC Analyst – L2

Experience: 7+ Years

Open Positions: 2

Role Summary

We are seeking an experienced SOC Analyst (L2) to operate at the core of our threat detection and response program. This role goes beyond traditional monitoring—you will work alongside AI-assisted alerting systems to investigate, triage, and respond to security incidents across both IT and OT environments.

Key Responsibilities

• Incident Investigation: Investigate and respond to complex security alerts escalated from the L1 team.
• Deep-Dive Analysis: Perform thorough technical analysis using tools such as Splunk, CrowdStrike, and Qualys.
• Event Correlation: Correlate events across multiple platforms to identify sophisticated attack patterns and lateral movement.
• AI Collaboration: Work with AI-assisted alerting systems to continuously improve the signal-to-noise ratio and detection accuracy.
• Process Improvement: Document security incidents meticulously and contribute to the ongoing improvement of incident response playbooks.
• Detection Tuning: Collaborate closely with the SOC Lead on detection tuning, logic refinement, and automation initiatives.

Required Experience & Skills

• Industry Experience: 7+ years of professional experience in SOC operations or Incident Response.
• SIEM Expertise: Hands-on expertise in Splunk or a similar enterprise SIEM platform.
• EDR Proficiency: Strong experience managing and investigating threats using EDR tools, with a preference for CrowdStrike.
• Vulnerability Context: Knowledge of utilizing vulnerability data (specifically Qualys) to provide context during incident investigations.
• Analytical Mindset: A strong analytical and investigative mindset with the ability to solve complex security puzzles.

Preferred Qualifications

• OT Security: Exposure to Operational Technology (OT) security tools such as Dragos.
• AI-Assisted SOC: Previous experience working within AI-assisted SOC environments or leveraging automated orchestration.

Operational Requirements

• Working Hours: This role operates in EST business hours to ensure seamless alignment with US stakeholders.
• Availability: Must be available for 24×7 escalation support as needed for critical security incidents.
• Experience Level: 7+ Years.
• Open Positions: 2.