The SOC Analyst executes and helps to create operational processes for consistent monitoring of client environments, detecting and analyzing threats and cybersecurity events to identify and defend against intrusion events.
Compensation
Minimum Salary $84,774, Median Salary $105,968
Responsibilities
Monitor, protect, and defend the enterprise perimeter against malicious network traffic.
Monitor, protect, and defend internal networks and hosts against ongoing and emerging threats.
Enrich monitoring logs with contextual operation data from functional areas correlate events and identify security issues, threats, and vulnerabilities
Conduct security event analysis and validation, triage validated incidents, perform initial containment where feasible, research incident and enrich incident case documentation, and escalate the incident for further analysis, containment, and eradication.
Review and analyze threat intelligence information and proactively search application, system, network logs to hunt and thwart relevant threats identified threats.
Requirements
Bachelor’s degree from an accredited college or university with a major in computer science, information systems, engineering, business, or a related scientific or technical disciplines
Master's Degree (preferred)
Nice to have: mid-to-advance level malware analysis
The Lead SOC Analyst manages day-to-day activities of SOC monitoring, incident detection, and response operations, providing technical expertise, leadership, and mentorship to support incident response efforts.
Responsibilities
Lead and manage daily SOC activities and ensure efficient monitoring of security systems.
Oversee triage, investigation, and resolution of security incidents.
Ensure incident handling aligns with defined SLAs and escalation procedures.
Coordinate and lead incident response efforts.
Analyze and respond to complex threats using threat intelligence and advanced detection techniques.
As a member of our Security Operations Center (SOC), you will lead the investigation and response to complex cyber threats, drive continuous improvement of detection and response capabilities, and act as a senior escalation point for the SOC team.
Investigate, validate, and respond to complex security incidents escalated by CrowdStrike Falcon Complete MDR Service, SOC analysts, users, and other IT departments.
Lead investigations of advanced security incidents using CrowdStrike Falcon, Microsoft Defender, SIEM platforms, and other security technologies.
Analyze alerts, suspicious activity, attack patterns, and threat actor behavior using endpoint telemetry, threat intelligence, cloud telemetry, and SIEM data.
Perform advanced root cause analysis, determine attack scope and impact, and provide detailed findings and recommendations.
Lead containment, eradication, and recovery activities for major security incidents.
Lead cybersecurity consulting engagements, performing vulnerability assessments, penetration testing, red teaming, and secure architecture reviews for EY clients.
Responsibilities
Conduct vulnerability assessments and penetration testing across web applications, networks, APIs, cloud environments and infrastructure
Apply vulnerability assessment methodologies and support remediation validation
Use security testing tools such as Burp Suite, Nmap, Nessus, OpenVAS, Metasploit and Kali Linux
Review penetration testing reports and map findings to security monitoring and response use cases
Support Red Team and adversary simulation activities
Requirements
Bachelor’s degree in Computer Science, Information Security, Cybersecurity or a related field
Lead proactive threat hunting operations across enterprise, cloud, identity, and operational technology environments to identify and disrupt advanced adversary activity.
Compensation
$116,255.00 - $151,132.50
Responsibilities
Lead proactive threat hunting operations across enterprise, cloud, identity, and operational technology environments
Analyze cyber threat intelligence, adversary TTPs, and emerging threat trends to assess risk and prioritize hunting efforts
Develop and execute hypothesis-driven threat hunts utilizing MITRE ATT&CK, Cyber Kill Chain, and intelligence-driven methodologies
Lead complex investigations involving advanced persistent threats, insider threats, ransomware, and targeted intrusion activity
Serve as a senior technical advisor during cyber incident response activities
Requirements
Bachelor's degree
Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical)
High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical)
Pre-sales - assist in qualifying sales leads from a technical standpoint.
Effectively carry out presales function in solution offerings (proposal, demo, presentation, etc.).
Lead all technical aspects of a sales cycle with the customer, from the initial RFIs, through to RFPs & RFQs when required.
Actively participate in preparing tender documents and proposals, RFPs, RFIs and POC demo.
Sales calls - be the main technical resource on sales calls and answer/ educate the customer on issues ranging from features, specifications and functionality to integration.
Lead attribution and adversary pursuit efforts for WTW, attributing intrusion activity to threat actors by analyzing infrastructure, malware, tooling, and tradecraft.
Responsibilities
Attribute intrusion activity to threat actors, campaigns and clusters by analysing infrastructure, malware, tooling, tradecraft (TTPs) and victimology, applying structured analytic techniques and clear confidence assessments
Track and profile adversaries over time, including state-sponsored, financially motivated and hacktivist groups, maintaining actor dossiers and mapping behavior to MITRE ATT&CK and the Diamond Model
Pursue adversaries proactively by pivoting across infrastructure, domains, certificates, malware families and open-source and commercial datasets to uncover new activity and links between clusters
Partner with Incident Response, Threat Hunting, Detection Engineering and the SOC to enrich investigations with attribution context and convert findings into hunt hypotheses and detections
Produce clear, evidence-based intelligence reports and briefings for technical teams, leadership and business stakeholders, tailored to their needs
Requirements
Bachelor’s Degree or equivalent in cybersecurity
Bachelor’s Degree or equivalent in computer science
Bachelor’s Degree or equivalent in intelligence studies
As a Senior Cyber Security Analyst, you will be a key part of a high-performing Security Operations Center (SOC) team, dedicated to continually improving and advancing capabilities to protect our client.
Compensation
Pay range up to: $60.23 per hour
Responsibilities
Act as a core member of the SOC including Cyber Monitoring & Response/Purple Teaming/Threat Hunting/Digital Forensics/Incident Response
Analyze security alerts and respond to security events and incidents
Maintain and update monitoring & response playbooks
Conduct proactive threat hunting
Develop expertise in our monitoring systems and technology to act as an SME in working with our detection engineering and automation teams to enhance our abilities to prevent, detect & respond
SOC AnalystDMI · Crownsville, US
Lead Analyst - SOC Monitoring (CPX)G Forty Two General Trading LLC · MBZ City, United Arab Emirates
Principal Cybersecurity AnalystNextEra Energy · Palm Beach Gardens, US
Senior Cybersecurity Analyst (SOC, Incident Response & Threat Hunting)Axiom Path · Remote, US
Cyber Threat Intelligence AnalystWTW · Madrid, Spain