SOC Analyst II (Cybersecurity)

Location: Fully remote; standard business hours are Monday through Friday, 8:30 AM to 5:30 PM, with willingness to work in a 24/7 environment required.

Company

Cybersecurity operations organization focused on protecting clients from cybersecurity threats.

What you will do

• Monitor and analyze security events using Microsoft Sentinel, Defender technologies, and Log Analytics.
• Use threat intelligence, KQL queries, and security analytics to identify and investigate potential threats.
• Triage and respond to security incidents, escalating issues as necessary.
• Collaborate with other teams to resolve incidents and improve the overall security posture.
• Participate in incident response and forensic investigations in accordance with NIST guidelines.
• Identify trends and anomalies and communicate incidents and findings to stakeholders and management.

Requirements

• Experience working in government environments.
• Familiarity with incident response requirements based on NIST guidelines.
• Proficiency implementing and using Microsoft Sentinel for SIEM and SOAR concepts.
• Experience using Azure Sentinel to detect and respond to security threats and anomalies and automate incident response.
• Experience with the MITRE ATT&CK framework for incident investigation and threat hunting.
• Experience conducting investigations and identifying malicious activity through packet analysis, log analysis, and endpoint forensics.
• Experience with scripting languages such as Python, PowerShell, and JavaScript.
• Willingness to work in a 24/7 environment.

Culture & Benefits

• Fully remote work.
• Full-time position.
• Standard Monday-to-Friday business hours from 8:30 AM to 5:30 PM, with 24/7 operational availability required.