Назад
Company hidden
7 дней назад

SOC Mid-Level Analyst

120 000 - 145 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
SOC Mid-Level Analyst (SIEM/SOAR): Monitoring SIEM systems and infrastructure to identify, analyze, and respond to security events and Indicators of Compromise with an accent on incident response, alert tuning, and security automation. Focus on conducting proactive threat hunting, building SIEM content, tuning SOAR playbooks, and improving detection and recovery processes in a mature 24x7x365 SOC.

Location: Remote; Sunday–Thursday, 12:00 AM–8:00 AM ET, subject to change

Salary: $120,000–$145,000 per year

Company

hirify.global operates in the cybersecurity domain and supports clients with security operations and incident response.

What you will do

  • Monitor SIEM systems, on-premises infrastructure, cloud applications, phishing inboxes, intelligence feeds, and incident queues for security events and intrusions.
  • Participate in critical incident response, including containment, remediation, recovery, and post-incident reviews.
  • Coordinate with SIEM engineering to tune events and alerts and improve alert fidelity.
  • Assist with creating and tuning SOAR playbooks and automated workflows.
  • Conduct proactive threat hunting and research emerging threats, vulnerabilities, and risks.
  • Work with Cyber Threat Intelligence, document detection patterns, and prepare threat-hunt reports for SOC leadership.

Requirements

  • Minimum 5 years of experience analyzing log data for intrusion analysis or information security operations.
  • Bachelor’s degree or equivalent with relevant certifications.
  • Experience with at least two analysis tools used in a CIRT or similar investigative environment.
  • Ability to build content in a SIEM system.
  • Ability to analyze and triage Indicators of Compromise.
  • Experience working in a mature 24x7x365 Security Operations Center.

Culture & Benefits

  • Fully remote work arrangement.
  • Full-time employment with benefits.
  • Opportunity to support challenging cybersecurity investigations and continuous learning.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →