SOC Analyst (L2) (Cybersecurity)

Location: Denver, Colorado, United States; onsite

Pay range: $60–$75 USD per hour

Company

hirify.global is an IT consulting firm delivering technology solutions, advisory expertise, and managed services to business clients.

What you will do

• Investigate L1-escalated incidents, build timelines, determine scope and root cause, and confirm impact.
• Correlate endpoint, identity, email, and network telemetry across Microsoft Defender and Fortinet platforms.
• Lead containment and eradication actions, coordinate with IT and network teams, and support major incident response.
• Write incident reports and brief client stakeholders on high-severity events; escalate to L3, incident response, or threat intelligence when required.
• Build and tune FortiSIEM correlation rules, watchlists, reports, Defender policies, custom detections, suppressions, and alert thresholds.
• Design and maintain FortiSOAR playbooks, mentor L1 analysts, update runbooks, and improve SOC metrics and processes.

Requirements

• 3–5 years of hands-on SOC analyst experience, including at least 1–2 years at L2 or in incident response; IT support or NOC experience alone does not qualify.
• Experience with FortiSIEM searches, correlation rules, and parsers; FortiSOAR case handling and playbook building; Microsoft Defender XDR and Defender for Endpoint; advanced KQL hunting; MITRE ATT&CK; and incident containment.
• Deep networking and security knowledge covering TCP/IP, DNS, firewalls, proxies, VPNs, and packet analysis; FortiGate experience is beneficial.
• Experience analyzing Windows and Linux logs, Active Directory, and Entra ID sign-in logs.
• Ability and interest in converting recurring manual work into tuned detections and automated playbooks.
• Fluent written and spoken English at a near-native or bilingual level.
• Strong interpersonal and communication skills for frequent client interaction through email, calls, and meetings.

Nice to have

• Degree in Cybersecurity, Information Technology, or a related field.
• Scripting experience for automation and analysis using Python, PowerShell, and REST APIs.
• Experience with Microsoft Sentinel, Defender for Cloud, Defender for Cloud Apps, MSSP environments, or multi-tenant SOCs.
• Certifications such as Microsoft SC-200, Fortinet FCP or NSE 5 for FortiSIEM or FortiSOAR, CompTIA CySA+, GCIH, GCIA, BTL1, or BTL2.

Culture & Benefits

• Customer-centric, data-driven approach focused on quality, consistency, trust, and mutual success.
• Emphasis on innovation, excellence, integrity, and transparency.
• Client-facing consulting environment with a white-glove service approach.
• Posting is active for a minimum of three days and extends by three days until the position is filled.