Security Operations Center (SOC) Analyst - Tier 2
About the Role
Our client, a rapidly expanding cybersecurity services firm, is seeking a skilled Security Operations Center (SOC) Analyst - Tier 2 to join their fully remote, 24/7 operations team. This role is critical in detecting, analyzing, and responding to security threats targeting client environments. As a Tier 2 analyst, you will handle escalated incidents, conduct in-depth investigations, and work to mitigate threats effectively. The ideal candidate possesses strong analytical skills, a deep understanding of security tools, and the ability to work under pressure in a dynamic, remote setting. This is a fantastic opportunity to be at the forefront of cyber defense from anywhere in the world.
Key Responsibilities
- Monitor security alerts from SIEM, IDS/IPS, EDR, and other security tools.
- Analyze escalated security incidents, identify root causes, and determine the scope of impact.
- Perform in-depth investigations using various forensic and analysis tools.
- Develop and execute containment, eradication, and recovery strategies for security incidents.
- Create detailed incident reports, documenting findings, actions taken, and recommendations.
- Collaborate with Tier 1 analysts, incident response teams, and other stakeholders.
- Contribute to the improvement of SOC playbooks, detection rules, and procedures.
- Stay up-to-date with the latest cyber threats, vulnerabilities, and attack techniques.
- Assist in threat hunting activities as directed.
- Provide expert guidance and support for junior SOC analysts.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Minimum of 3 years of experience working in a Security Operations Center (SOC) or similar security operations role.
- Proven experience in analyzing security alerts and investigating security incidents.
- Strong understanding of networking concepts, protocols, and common attack vectors.
- Proficiency with SIEM platforms (e.g., Splunk, QRadar, ArcSight) and EDR solutions.
- Familiarity with security frameworks such as MITRE ATT&CK.
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong written and verbal communication skills for clear and concise reporting.
- Ability to work effectively in a fast-paced, remote environment, often under pressure.
- Relevant certifications such as CompTIA Security+, CEH, or GIAC certifications are a plus.
Benefits
This fully remote position offers a competitive salary, comprehensive health and wellness benefits, and retirement plan contributions. Our client provides excellent opportunities for professional growth, advanced training, and certifications. Be part of a world-class cybersecurity team, defending against sophisticated threats on a global scale. Enjoy the flexibility and work-life balance that comes with a remote role, contributing to vital security operations.
#J-18808-Ljbffr