SOC Engineer Tier 2

Why AIS?

When you join AIS, you’re joining a mission-driven team that’s passionate about making a difference. You’ll work on projects that matter, alongside industry-leading experts, in an environment that fosters innovation, driving client success, and empowering our team to make a lasting impact. As an employee-owned company, we value collaboration, inclusivity, continuous growth, and shared success.

Core Knowledge & Skills

• Designs secure architectures
• Leverages advanced threat detection
• Leads incident response
• Implements security automation

Work & Complexity

• Manages complex incidents
• Counsels threat analysis
• Leads audits
• Improves process improvements

Quality & Independence

• Delivers high-quality reports
• Aligns practices with industry standards
• Operates with high autonomy

Teamwork & Communication

• Leads team projects
• Collaborates cross-functionally
• Mentors juniors
• Solves conflicts

Consulting & Engagement

• Provides strategic consulting
• Leads improvement initiatives
• Recommends advanced technologies
• Manages vendor relationships

What We're Looking For

We're looking for driven individuals who are passionate about making a difference, eager to grow, and aligned with our core principles.

Working at AIS

AIS is dedicated to providing our employees with diverse opportunities to grow their careers while supporting a variety of impactful projects.

Initial Project Assignment

Your initial project assignment will involve supporting the unique needs of our client as a SOC Engineer Tier 2. You will use cutting-edge cloud technologies to ensure secure operations for our clients, ensuring that large-scale Azure and M365 environments are secure and that security events are quickly identified and resolved.

Specialized Roles

• SIEM configuration and maintenance
• Building the security architecture and systems
• Working with development operations teams to ensure systems are up to date
• Documenting requirements, procedures, and protocols to ensure other users have the right resources
• Working with customers on complex operational issues

Location and Travel Details

This is a weekend/holiday shift position, but you must be willing to fill in for other shifts as needed. Saturday, Sunday, & Holidays 8:00AM-8:00PM + some weekday shifts.

What You'll Be Doing

• Review the environment scoping information and inventory to ensure a deep understanding of the organization's business, its applications, and technical solutions
• Be well versed in the areas of focus on the security roadmap and have an understanding of how they will be implemented and impact the work that the Security Operations Center staff will have to take up
• Provide the SOC with an understanding as to the mapping between IT & organization security and how it relates to the responsibilities and tasking that the SOC has
• Ensure that the SOC team is focusing on education based on preventative maintenance and roadmap capabilities
• Participate in audit reviews to ensure that gaps in coverage are being addressed by the SOC team
• Create a process where the reports are reviewed and feedback loops provide the ability to improve them
• Specialize in SIEM configuration and maintenance
• Responsible for building the security architecture and systems
• Work with development operations teams to ensure that systems are up to date
• Document requirements, procedures, and protocols to ensure that other users have the right resources
• Work with customers on complex operational issues

Skills Required for This Opportunity

• 6 + years of experience in security engineering to operate M365 and Azure platforms
• Security + certification
• Experience in Azure and M365 environments
• Good experience in a variety of SOC engineering/administration tools
• Handles daily alerts, incidents; monitors, tracks, analyzes and records
• Works with other IT professionals to resolve fast moving vulnerabilities such as spam, virus, spyware and malware
• Maintains security vulnerability information from vendors and third parties
• Strong engineering analysis ability
• CySA+ is required within 6 months of joining the team

Preferred Skills

• Provides technical guidance / recommendations to clients to enhance their overall security posture within the managed products
• Works with vendors, outside consultants, and other third parties to improve information security within the organization
• Advanced Forensics skills to evaluate current malware and phishing threats
• Familiarity with Microsoft Azure Sentinel and Microsoft Defender Suite
• Experience with SOC capabilities using tools like Azure Monitor, Azure Sentinel, Azure Automation, Azure Backup, Azure Security Center, etc.
• Experience with IaaS and PaaS services such as VMs, Azure Service Environment ASE, Azure Kubernetes Service AKS, Spring Cloud, Azure Virtual Desktop, etc.
• MSFT: SC-200, SC-900, AZ-900, AZ-500

Compensation

At AIS, we are committed to offering competitive and fair compensation that reflects the skills, experience, and contributions of each team member. The targeted base salary range for this role is $138,000-$209,000 per year. Please note that this range is provided as a guideline and the final offer will be based on several factors, including but not limited to, skillset and competencies, level of experience, education, certifications, and location. We value transparency in our hiring process and are happy to discuss how your unique qualifications align with our compensation structure during the interview process.