Cybersecurity SOC Analyst

Job Summary

Supporting global operations, the full-time remote Cybersecurity SOC Analyst will investigate security alerts, improve detection rules, and monitor sensitive data movement across the environment.

Key responsibilities

• Monitor, triage, and investigate security alerts using Rapid7 InsightIDR, mitigating verified security incidents
• Write and tune detection rules to correlate events from various sources and identify automation opportunities
• Review data loss prevention events to identify inappropriate data transfers and follow up on flagged activities

Required qualifications

• 2-4 years of hands-on SOC analyst experience with SIEM platforms
• Practical experience with Rapid7, Splunk, Microsoft Sentinel, or similar SIEM tools
• Experience with data loss prevention tools and investigating potential data loss incidents
• Querying, scripting, or programming skills applicable to security analysis, with knowledge of LEQL, KQL, SPL, or Python
• A relevant technical degree or equivalent industry experience demonstrating a broad understanding of IT systems and network protocols