SOC Analyst II

Job Duties

• Monitor security events and network activity to identify and respond to potential threats.
• Investigate escalated security alerts to determine scope, root cause, and business impact.
• Analyze logs, endpoint telemetry, and network traffic to identify indicators of compromise and malicious activity.
• Conduct proactive threat hunting to identify emerging security risks.
• Tune and optimize detection rules, alerts, and correlation logic to improve detection accuracy and reduce false positives.
• Document security incidents, investigations, and response activities in accordance with established procedures.
• Follow and enhance SOC playbooks and standard operating procedures.
• Monitor external threat intelligence sources for emerging security threats.
• Support incident response activities during cybersecurity events.
• Participate in root cause analysis and lessons learned following security incidents.

Job Requirements

• Ability to create queries, reports, and scripts using current security coding and SIEM query languages.
• Ability to prioritize tasks effectively in a fast-paced operational environment.
• Working knowledge of software troubleshooting tools.
• Ability to analyze and interpret a variety of technical and security-related information.