Security Operations Center (SOC) Analyst

SOC Analyst Job Summary: We are seeking a highly motivated and detail-oriented SOC Analyst to join our Security Operations Center (SOC). The SOC Analyst will be responsible for monitoring, analyzing, and responding to cybersecurity incidents using a variety of tools and techniques. This role is essential in identifying threats, mitigating attacks, and ensuring the overall security posture of the organization.

This position also offers opportunities to participate in broader cybersecurity initiatives. Motivated individuals may have the chance to expand their skill sets and take on additional cybersecurity projects or responsibilities as assigned.

Key Responsibilities: • Monitor security alerts and events from various security tools (SIEM, IDS/IPS, EDR, etc.) • Analyze network traffic, logs, and system data to detect anomalies and potential threats • Investigate and respond to security incidents, escalating as necessary • Perform initial triage of alerts to determine severity and potential impact • Document incidents, findings, and remediation steps in ticketing systems • Collaborate with IT teams to implement and improve incident response procedures • Stay up to date with current threat trends, vulnerabilities, and threat intelligence feeds • Participate in threat hunting and vulnerability scanning activities • Assist in the creation of SOC playbooks, standard operating procedures (SOPs), and reports • Contribute to additional cybersecurity projects and tasks as assigned

Required Qualifications: • Bachelors degree in Computer Science, Cybersecurity, Information Technology, or related field or industry-recognized certification(s) (e.g., Security+, GSEC, CEH, etc.) • 13 years of experience in a cybersecurity or IT security role • Knowledge of cybersecurity fundamentals, including malware, attack vectors, and threat mitigation • Experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, QRadar, LogRhythm) • Understanding of TCP/IP, OSI model, firewalls, and network protocols • Strong analytical and problem-solving skills • Excellent written and verbal communication skills

Preferred Qualifications (Nice to Have): • Experience with scripting or automation (e.g., Python, PowerShell) • Familiarity with cloud architecture and security tools (AWS, Azure, GCP) • Strong understanding of Identity and Access Management (IAM) principles and implementation • Experience in threat hunting and digital forensics