Description
We are seeking a Cybersecurity Analyst to join our SOC. You will participate in the execution of incident detection, containment, and remediation activities across Windows, Linux, and cloud environments. This role blends hands-on technical response, threat hunting, network analysis, and cross-functional coordination to reduce risk and improve security posture.
Responsibilities
- Incident Response and Network Forensics: Triage, containment, eradication, and recovery for security incidents; perform network-based forensics.
- Detection and Monitoring: Operate and tune SIEM, EDR/XDR, and network detection tools; develop and maintain detection rules, alerts, and dashboards.
- Threat Hunting and Analysis: Proactively hunt for threats using telemetry from endpoints, network devices, cloud services, and logs; map activity to MITRE ATT&CK techniques.
- Malware Analysis: Perform static and dynamic analysis of suspicious binaries and scripts.
- Vulnerability Management: Support vulnerability scanning, prioritize findings, and coordinate remediation with engineering teams.
- Cloud and Identity Security: Investigate incidents in Azure/VMware; analyze identity and access events; support Zero Trust and IAM controls.
- Automation and Playbooks: Create and maintain incident response playbooks and SOAR workflows; automate repetitive tasks with scripting (Python, PowerShell, Bash).
- Logging and Telemetry: Analyze logs from systems and applications.
- Collaboration and Communication: Coordinate with system/network administrators, developers, and external stakeholders; prepare incident reports and brief leads.
- On-call and Emergency Response: On-call for emergencies and respond effectively under pressure to meet critical deadlines.
Qualifications
- Experience: Minimum 5 years working in Windows and Linux environments with hands-on incident response or SOC experience.
- Certifications: CCNA, GCIH, GCIA, OSCP, CEH, Security+ or equivalent.
- Cloud Certifications: AWS/Azure/Oracle security certifications or hands-on cloud security experience.
- Technical Knowledge: Strong understanding of TCP/IP, DNS, SMTP, HTTPS, and other Internet protocols.
- Security Technologies: Practical experience with SIEM, EDR/XDR, firewalls, IDS/IPS, anti-malware, vulnerability scanners, and encryption technologies.
- Network Forensics and Log Analysis: Ability to collect, parse, and interpret logs and artifacts from endpoints, servers, network devices, and cloud services.
- Threat and Exploit Knowledge: Familiarity with common exploitation techniques, software vulnerabilities (e.g., input validation flaws), and attacker tradecraft.
- Scripting and Tools: Proficiency in at least one scripting language (Python, PowerShell, Bash) and experience with forensic and analysis tools (Wireshark, Sysinternals).
- Incident Handling: Familiar with incident response lifecycle, containment/isolation techniques, evidence collection, and chain-of-custody practices.
- Communication: Excellent written and verbal communication skills; able to explain technical decisions clearly to technical and non-technical stakeholders.
- Soft Skills: Strong prioritization, organization, analytical reasoning, attention to detail, and ability to perform under stress.
- Teamwork: Proven ability to collaborate in tightly coordinated teams during emergencies and mentor junior staff.
- Security Mindset: High integrity and ability to handle confidential and sensitive information appropriately.
Benefits InformationRegular - The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits. Paid Time Off (PTO) is offered to regular full-time and part-time employees.
Pay Range$80,000 -$90,000
Job ID2026-24382
Work TypeOn-Site
