Tier 2 SOC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Tier 2 SOC Analyst investigating and containing escalated SIEM and EDR threats for federal and Fortune 100 clients. Developing runbooks, managing vulnerabilities, and meeting overnight incident-response SLAs.
Responsibilities:
- Conduct deeper investigation of escalated SIEM and EDR alerts across client tenants
- Investigate, contain within your authority, and escalate through the defined path with clear, documented handoffs
- Develop and refine runbooks and standard operating procedures
- Track and validate vulnerability findings using Tenable and route them into the correct workflow
- Meet strict response and resolution service levels on every event and every shift
- Open, update, and close tickets with accurate, auditable notes, and maintain clean shift logs
- Communicate clearly with clients and the on-call lead during overnight events
- Support monthly reporting with accurate event and response data
Requirements:
- United States citizenship
- Ability to pass a drug screening and a full background investigation, including verification of references, employment history, education, and certifications
- 3–5 years of SOC or security operations experience, including hands-on incident investigation and response
- Demonstrated experience with SIEM alerting and EDR alert triage and containment
- Solid networking and operating-system fundamentals across Windows, macOS, and Linux
- Understanding of the incident lifecycle: detection, triage, containment, and escalation
- Ability to work overnight shifts reliably on a rotation that includes weekends and holidays
- Clear written communication and disciplined documentation habits
- Experience with Microsoft Sentinel, Splunk, CrowdStrike or comparable EDR, and Tenable
- Security+, CySA+, GCIH, GSEC, or a similar certification
- Scripting for triage or automation using Python or PowerShell
- Prior managed security services or multi-tenant SOC experience
- Exposure to critical-infrastructure environments
- Residency in the Hampton Roads through Richmond, VA corridor is preferred
Benefits:
- Medical – Multiple POS health plan options including an HSA-compatible plan
- Dental – PPO coverage for preventive, basic, and major services
- Vision – Annual exam, frames, lenses, and contact lens allowance
- 401(k) – Employer match up to 5% of eligible compensation
- Long-Term Disability – 100% employer-paid coverage at 50% of pre-disability earnings
- Life Insurance & AD&D – 100% employer-paid coverage valued at $10,000 each
- PTO – 15–25 days annually based on tenure
- Paid Federal Holidays – All 11 federal holidays observed
Similar Jobs
Tier 1 SOC Analyst
Tier 1 SOC Analyst monitoring SIEM and EDR alerts for Dragonfli Group’s federal and Fortune 100 cybersecurity clients. Triaging incidents, tracking vulnerabilities, and escalating overnight events.
Associate SOC Analyst
Associate SOC Analyst protecting Expel customers through managed detection and response. Investigating alerts, hunting threats, and responding across endpoint and cloud environments.
Director of Security Operations
Aledade, a value-based primary-care network, seeking a remote Director of Security Operations in the United States. Leading SOC operations, incident response, threat intelligence, vulnerability management, and security teams.
Senior GRC Analyst, SOC 2
Senior GRC Auditor I ensuring client satisfaction through effective IT controls and compliance audits. Develops client relationships while leading external audits to meet industry standards.
Security Operations Engineer – Incident Response
Security Operations Engineer leading incident response and forensic investigations at ProCircular. Managing critical security incidents and developing detection methodologies in a SOC environment.
Security Operations Engineer
Security Operations Engineer managing security operations and compliance for AI functions in higher education. Ensuring data protection and security in cloud environments and IT operations.
Senior Security Engineer, Incident Response
Senior Security Engineer leading the technical response to incidents and enhancing security processes for Twilio. Working across R&D Engineering and Business teams on security challenges and incident management.
SecOps Transformation Advisor
SecOps Transformation Advisor driving XSIAM revenue and consultative sales strategy for cybersecurity solutions. Engaging executive relationships and providing business value through tailored proposals.
Security Operations Engineer
Security Operations Engineer providing technical and operational support for MDR customers at Vector3. Involved in incident response, troubleshooting, and security initiatives.
Cybersecurity Incident Response Triage Analyst
Cybersecurity Incident Response Triage IR Analyst working with the CIRT team at Accenture Federal Services. Monitoring, analyzing incidents, and developing response strategies to enhance cybersecurity for federal government entities.
Presales Security Architect – SecOps
Presales Security Architect at GuidePoint Security serving as a technical advisor. Leading technical discovery, design, and positioning in cybersecurity across the Northeast region.
Analyst, Security Operations
Analyst in Security Operations at Danaher handling security events, mentoring junior analysts, and developing relationships with Security and IT teams. Reviewing security alerts and improving security posture across a multinational corporation.
Cyber Operations Lead – Incident Response
Cyber Operations Lead responsible for managing cyber incident response operations at Chickasaw Nation Industries. Collaborating with teams to guide investigations and implement security strategies.
Senior SOC Analyst
Analista SOC Sênior responsible for security operations, monitoring, and incident response at a fintech. Collaborating with teams to secure systems and mitigate risks.
External Communications, Operations & Analytics Specialist – Experienced/Senior
Boeing seeks External Communications Specialist to shape communication strategies and engage key media stakeholders. Collaborate across teams to manage communications operations and content strategy.
Cybersecurity Operations Engineer
Cybersecurity Operations Engineer enhancing cybersecurity operations for business customers in Switzerland. Working end-to-end with customers from implementation to operations.
SOC Analyst I
SOC Analyst I monitoring and detecting cybersecurity threats for Apollo Information Systems. Collaborating with the team to protect client networks and systems.
Junior SOC Analyst
SOC Analyst - Level 1 responsible for routine security investigations at Accesa. Combining alert analysis, evidence correlation, and case documentation in a shift-based operations role.
Cybersecurity Operations – Incident Response Lead
Cybersecurity Operations Lead managing 24×7 security operations and incident response for Coastal's hybrid banking environment. Leading detection, response, and vulnerability management to protect businesses and clients.
Senior Security Operations Analyst
Security Operations Analyst monitoring and investigating security threats across enterprise systems. Collaborating with teams on incident response and threat intelligence activities.