Cyber Security, SOC Analyst – Weekend Nights
Job Description • Support 24x7 monitoring, detection, and management of advanced cyber threats • Execute operational processes supporting responses to identified security incidents • Perform deep-dive incident analysis by correlating data from multiple sources to determine impact on critical systems or datasets • Interpret SIEM output, incident reporting platforms and mailboxes, and phone calls to identify potential security incidents • Handle incidents according to playbooks and SOPs • Identify security problems requiring mitigating controls and advise on remediation actions • Analyze threat intelligence to assess risk and adapt defenses • Provide subject matter expertise on network-based attacks, intrusion methodologies, and threat management • Escalate complex incidents and collaborate with Threat Management team members • Use AI/ML-based tools to detect anomalies, automate triage, and improve threat intelligence • Provide input on leveraging AI, ML, and SOAR capabilities to improve CSOC efficiency and accuracy • Stay current on cybersecurity trends, threat actors, and AI/ML advancements • Tune security policies and maintain visibility into cloud and endpoint environments • Support continuous improvement of the organization’s security posture • Identify and support automation use cases, including AI/ML enhancements • Collaborate across the organization to provide SOC enhancement capabilities through automation and AI • Work initial temporary orientation and qualification hours Monday–Friday, 700am–330pm ET • Work final assigned weekday night shift Monday–Friday, 1100pm–730am ET Requirements • At least 3 years of experience in IT and/or SOC operations • BA/BS in Computer Science, IT, or related field, or equivalent experience • Alternatively, 7+ years of experience in cybersecurity and IT and SOC analysis & operations • U.S. Citizenship required • Ability to obtain Public Trust clearance • Experience in cyber/IT security • Familiarity with command and sophisticated threat actor tools and techniques • Network traffic analysis and threat detection methodologies • Understanding of Boolean logic, TCP/IP fundamentals, network-level exploits, and IDS/IPS technologies and signature development and optimization • Familiarity with IT control frameworks, risk management techniques, and cloud security (AWS, Azure, GCP) • Hands-on experience with cybersecurity automation and SIEM/SOAR platforms • Proficiency using ML frameworks for anomaly detection, threat intelligence, and behavioral analysis • Data analysis and feature engineering skills for processing large datasets • Familiarity with AI/ML techniques in cybersecurity • Excellent communication, organizational, and interpersonal skills • Preferred Experience with Splunk, ProofPoint, Cisco FirePower, SentinelOne, Microsoft Defender, Defender for Cloud Apps, Defender for Endpoint, Defender XDR, Defender for Office 365, Azure Entra ID, and Google Cloud Security Command Center (SCC) • Preferred Expertise with IDS/IPS architectures, signature creation, and anomaly-based detection • Preferred Direct experience with AI/ML applications in SOC environments Benefits • Medical Insurance • Dental Insurance • Vision Insurance • Life Insurance • Short Term & Long Term Disability • 401k Retirement Savings Plan with Company Match • Paid Holidays • Paid Time Off (PTO) • Tuition and Professional Development Assistance • Remote work flexibility
