Security Operations Center (SOC) Analyst (Remote)

Role Overview

The Security Operations Center (SOC) Analyst monitors, detects, analyzes, and responds to cybersecurity events and incidents to protect client environments. The role focuses on timely escalation, remediation, and maintaining situational awareness of threats.

Responsibilities

• Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewalls, and other security tools
• Perform triage and analysis to determine severity, impact, and root cause
• Document and escalate incidents according to incident response procedures
• Execute initial containment and remediation using defined playbooks
• Maintain situational awareness of current threats and vulnerabilities
• Produce detailed incident reports for clients and internal stakeholders
• Collaborate with incident response, threat intelligence, and engineering teams for deeper investigations
• Create and maintain knowledge base articles, detection runbooks, and escalation workflows
• Participate in after-hours/on-call rotation if required

Requirements

• Bachelor’s degree (or equivalent experience)
• 2+ years in a SOC, cybersecurity, or IT security operations role
• Familiarity with SIEM tools (e.g., Splunk, Microsoft Sentinel, LogRhythm)
• Familiarity with EDR platforms (e.g., CrowdStrike, SentinelOne)
• Understanding of common attack vectors (e.g., phishing, ransomware, lateral movement)
• Strong analytical, investigative, and problem-solving skills
• Experience with ITSM systems (e.g., ServiceNow, ConnectWise, FreshService)
• Background in an MSP or similar customer-facing IT support environment
• Excellent written, verbal, and interpersonal communication skills
• Strong documentation habits and commitment to knowledge sharing

Nice-to-Haves

• Not explicitly stated beyond the listed qualifications.