SOC Analyst II
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
SOC Analyst II protecting small and medium-sized businesses with enterprise-class cybersecurity. Leading threat investigations, incident response, threat hunting, and vulnerability management.
Responsibilities:
- Serve as the primary escalation point for Tier I analysts
- Take ownership of critical/high-severity alerts and escalated security incidents
- Analyze endpoints, network traffic, and log data to validate incidents and perform root cause analysis
- Lead containment, eradication, and recovery during active security incidents
- Follow and document Standard Operating Procedures and Incident Response Plans
- Reconstruct attack chains using the MITRE ATT&CK Framework and Cyber Kill Chain
- Conduct intelligence- and hypothesis-driven threat hunts
- Write executive reports with clear narratives, detailed analysis, and actionable recommendations
- Manage the vulnerability management lifecycle, including scan analysis, risk-based prioritization, and remediation coordination
- Develop and maintain incident response playbooks and SOPs
- Provide technical guidance, training, and feedback to Tier 1 analysts
- Participate in an on-call rotation for critical incidents outside standard business hours
- Collaborate with and mentor junior staff
- Help advance capabilities in digital forensics and incident response, threat hunting, vulnerability management, and threat intelligence
Requirements:
- U.S. citizenship
- Must be eligible for a Secret clearance
- Minimum of 2–5 years of experience in a Security Operations Center and/or cyber-adjacent or IT administration roles
- Intermediate to advanced understanding of Windows OS internals, including Event Tracing for Windows, Win32 API, Registry, Memory, and Process operations
- Intermediate to advanced understanding of TCP/IP, DNS, HTTP, SSL/TLS, and other common network protocols
- Intermediate to advanced ability to write and interpret Python or PowerShell scripts
- Ability to manage Windows devices via command line using PowerShell or Batch
- Ability to detect and reverse engineer malicious scripts or other high-level languages
- Understanding of code injection and attack/evasion techniques related to Windows
- Prior experience with SIEM platforms such as Microsoft Sentinel, ELK/Elastic Stack, or Splunk
- Hands-on experience with Sysinternals Suite, Volatility, SIFT Workstation, CyberChef, Forensic Browser for SQLite, Velociraptor, Explorer Suite, Wireshark, and malware analysis sandboxes, or equivalent tools
- Familiarity with malware development, social engineering, phishing, exploitation, persistence, evasion, credential theft, C2, exfiltration, and lateral movement
- Intermediate to advanced certification such as GCIH/GCIA/GCFA, OSCP, BTL2, or equivalent is highly desired
- Previous team lead or supervisory leadership experience is desired
- Experience with Azure, Microsoft Sentinel/Defender XDR, Entra ID, and Kusto Query Language (KQL) is desired
- Active participation in Capture-the-Flag events and homelabbing is a plus
- Understanding of x64 assembly, Windows data structures, and undocumented parts of Windows OS is desired
- Familiarity with low-level reverse engineering and debugging tools such as Ghidra, x64dbg, and IDA is desired
- Must participate in an on-call rotation
Benefits:
- Fully paid individual healthcare, vision and dental insurance for the employee
- Paid certification and training opportunities
- Three weeks of paid vacation
- 11 paid holidays
- Supportive environment with a focus on keeping healthy work-life balance
- Retirement benefit (401k) with company match
- Potential transition into a team leadership role
- Exposure to new and emerging technologies
- Fun, dynamic environment working on interesting problems
Similar Jobs
Manager, Information Security Operations
Information Security Operations Manager leading Malwarebytes’ global Security Operations team. Owning SIEM, incident response, vulnerability management, threat hunting, DLP, and AI security for its cybersecurity business.
Manager, Information Security Operations
Security operations manager leading global SecOps, incident response, and threat management for Malwarebytes cybersecurity and ThreatDown MDR. Building resilient 24x7 protection across distributed teams and systems.
Senior SOC Analyst
Senior SOC Analyst leading high-severity investigations, threat hunting, malware analysis, and forensics. Strengthening detection and response for DeepSeas’ global cybersecurity clients.
SOC Analyst, SIEM Engineer
SOC Analyst/SIEM Engineer monitoring and improving security systems for secupay AG, a German omnichannel payments provider. Investigating incidents and optimizing FortiSIEM detection capabilities.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across client environments for Workstreet’s managed security and compliance services. Tuning detections, guiding remediation, and supporting 24x7 SOC coverage.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across EDR, SIEM, firewall, IPS, and WAF platforms. Providing actionable incident findings and remediation guidance for Workstreet’s cybersecurity and compliance clients.
Security Operations AI Engineer – Contract
Security Operations AI Engineer securing enterprise AI/ML systems for 66degrees, an AI transformation partner. Building detection pipelines, incident playbooks, and governance controls for emerging AI threats.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing managed security services for Axians Switzerland. Analyzing cyberthreats and operating Microsoft Azure and M365 security environments.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss customers. Analyzing cyber threats across Microsoft 365 and Azure environments.
Security Operations Engineer, Microsoft Solutions
Security Operations Engineer operating managed security services across Microsoft 365 and Azure. Analyzing cyber threats and delivering security projects for Axians Schweiz’s digital transformation clients.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss cloud and IT customers. Analyzing cyberthreats and delivering Microsoft security projects.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating Axians Switzerland’s managed security services. Analyzing cyberthreats and implementing Microsoft-focused security projects across Azure and M365 environments.
SOC Analyst
Information Security & Compliance Analyst maintaining SOC 2, ISO 27001 and Cyber Essentials readiness for SyncEzy’s B2B SaaS integration platform. Owning evidence, controls, risks and audit coordination remotely.
Director, Security Operations Center
Director leading Thrive’s Security Operations Center for cloud, cybersecurity, networking, disaster recovery, and managed services. Overseeing SOC operations, incident response, threat monitoring, and analyst teams.
SOC Analyst
SOC Analyst monitoring security alerts and resolving incidents for Leadtech’s global digital products. Improving vulnerability management and security processes across cross-functional teams.
Global IT Security Operations Lead – Exposure Management
Global security operations leader building incident response, detection, and exposure management capabilities. Protecting aerospace intellectual property, manufacturing uptime, and hybrid IT environments.
Security Operations Associate
Security Operations Associate supporting Everbridge’s critical event management technology. Coordinating secure journey services, security assistance, vendors, client communications, and operational records.
Security Incident Response Manager – Abuse Operations
Stripe Security Incident Response Manager investigating fraud and abuse across its financial infrastructure platform. Leading incident response, mitigation, automation, and cross-functional security improvements.
Senior SOC Analyst
Senior SOC Analyst investigating and resolving OT security incidents for ABB’s industrial technology solutions. Performing forensic analysis, improving threat detection, and automating SOC processes.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer bei Axians Schweiz für Microsoft Cloud- und Managed-Security-Umgebungen. Implementierung, Betrieb und Weiterentwicklung von Managed Security Services sowie Analyse von Cyberbedrohungen.