SOC Analyst II

Job Summary

Leading the analysis, containment, and remediation of complex threats, the full-time remote SOC Analyst II will manage concurrent investigations, drive improvements in workflows, and mentor junior staff while ensuring effective incident response and threat detection.

Key responsibilities

• Serve as the primary escalation point for Tier I analysts, taking ownership of critical security incidents
• Analyze endpoints and network traffic to validate security incidents and perform root cause analysis
• Lead containment and recovery efforts during active security incidents, ensuring adherence to SOPs and IR plans

Required qualifications

• U.S. citizenship with eligibility for a Secret clearance
• 2-5 years of experience in a Security Operations Center or related cyber-adjacent roles
• Intermediate to advanced understanding of Windows OS internals and networking protocols
• Experience with SIEM platforms and incident response tools
• Ability to write and interpret scripts in Python or PowerShell for automation tasks