Security Operations Center (SOC) Analyst (Remote)

Role Overview

Security Operations Center (SOC) Analyst responsible for monitoring, detecting, analyzing, and responding to cybersecurity events and incidents. The role protects client environments by identifying threats, minimizing risk, and ensuring timely escalation and remediation.

Responsibilities

• Monitor security alerts and events from security technologies, including SIEM, EDR, IDS/IPS, and firewalls
• Perform triage and analysis to determine severity, impact, and root cause
• Document and escalate incidents following defined incident response procedures
• Execute initial containment and remediation using defined playbooks
• Maintain situational awareness of emerging threats and vulnerabilities
• Produce detailed incident reports for clients and internal stakeholders
• Collaborate with incident response, threat intelligence, and engineering teams for deeper investigations
• Create and maintain knowledge base articles, detection runbooks, and escalation workflows
• Participate in after-hours/on-call rotation, if required

Requirements

• 2+ years experience in a SOC, cybersecurity, or IT security operations role (or Bachelor’s degree or equivalent experience)
• Familiarity with SIEM tools (e.g., Splunk, Microsoft Sentinel, LogRhythm)
• Familiarity with EDR platforms (e.g., CrowdStrike, SentinelOne)
• Understanding of common attack vectors such as phishing, ransomware, and lateral movement
• Strong analytical, investigative, and problem-solving skills
• Experience with ITSM systems (e.g., ServiceNow, ConnectWise, FreshService)
• Background in Managed Services Provider (MSP) or customer-facing IT support environment
• Excellent written, verbal, and interpersonal communication skills
• Strong documentation habits and commitment to knowledge sharing

Nice-to-Haves

• Not explicitly stated beyond the listed tools and MSP/customer-facing background.