security operations center (soc) analyst

Dexcom

<div>The Company
Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health. 
We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.
Meet the Team
Join our Security Operations Center (SOC) team as a Sr. SOC Analyst. Our team excels in leveraging SIEM and SOAR technologies to safeguard our organization. We focus on threat hunting, incident response, and developing effective threat detection rules. As a Sr. SOC Analyst, you'll monitor and analyze security events, investigate threats, and respond to incidents. You'll also participate in an on-call rotation, act as an escalation point for Tier 1 SOC, and contribute to building out our SIEM and SOAR tools.
Where You Come In
<ul><li>You monitor and analyze security events using SIEM and SOAR technologies.
</li><li>You identify and investigate threats using threat hunting techniques.
</li><li>You respond to security incidents and take appropriate action to mitigate risks.
</li><li>You develop and maintain threat detection rules.
</li><li>You automate SOAR playbooks to streamline incident response.
</li><li>You work with other members of the SOC team to ensure effective security operations.
</li><li>You stay up to date on the latest security threats and trends.
</li><li>You participate in an on-call rotation.
</li><li>You act as an escalation point for the Tier 1 SOC.
</li><li>You assist in building out the SIEM and SOAR tools.
</li></ul>What Makes You Successful
<ul><li>You possess a strong understanding of threat hunting techniques and incident response procedures.
</li><li>You have experience developing and maintaining threat detection rules.
</li><li>You are skilled in automating SOAR playbooks.
</li><li>You excel in communication and teamwork.
</li><li>You can work independently and as part of a team.
</li><li>You thrive under pressure and can meet deadlines.
</li></ul>Preferred Qualifications
<ul><li>You hold a CISSP, GCIH, or other relevant security certification.
</li><li>You have experience in a SOC environment.
</li><li>You are familiar with cloud security technologies.
</li><li>You have experience with containers for SOC response.
</li></ul>Education and Experience Requirements:
<ul><li>Typically requires a bachelor&rsquo;s degree in a technical discipline, and a minimum of 5-8 years related experience or master&rsquo;s degree and 2-5 years equivalent industry experience or a PhD and 0-2 years&rsquo; experience
</li></ul>To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Dexcom. Only authorized staffing and recruiting agencies may use this site or to submit profiles, applications or resumes on specific requisitions. Dexcom does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to the Talent Acquisition team, Dexcom employees or any other company location. Dexcom is not responsible for any fees related to unsolicited resumes/applications.</div>

Sr Security Operations Center (SOC) Analyst

The Cigna Group

<div>Cyber Security Senior Analyst, Incident Response
Position Summary:
Cigna Information Protection is looking for a Senior Analyst, Incident Response (IR). The Incident Response Senior Analyst is responsible for handling and coordinating lower severity cybersecurity incidents as part of a 24x7 operation. The IR Senior Analyst acts as a supporting role to the major incident management process in the event of High or Critical Severity cybersecurity incidents. The IR Senior Analyst also acts as a point of escalation to lower tier analysts and provides mentorship.
Job Description &amp; Responsibilities:<ul><li>
Monitor and respond to security alerts generated by the Managed Security Service Provider (MSSP), Cigna&rsquo;s SIEM and/or SOAR platforms.</li><li>
Analyze, document, and communicate security events based on priority given by MSSP or SOC Team Lead and according to SOC protocol.</li><li>
Provide escalation support for security events from SOC Analysts.</li><li>
Participate in CSIRT functions supporting investigative requests and/or to assist with the development of containment/mitigation strategies.</li><li>
Perform host and network-based log analysis to identify potentially infected hosts and escalate to appropriate team according to SOC protocol.</li><li>
Correlate IOCs with data from information security systems/tooling to identify attacks and/or potentially compromised systems and escalate to appropriate team according to SOC protocol.</li><li>
Collaborate with Cigna&rsquo;s Threat Intelligence, Threat Hunt, and Adversary Simulation teams to refine and/or improve threat detections and/or security controls and configurations for security monitoring systems.</li><li>
Contribute to the evaluation, testing, and implementation of new detections, security tools and processes.</li><li>
Develop and maintain documentation for all assigned responsibilities. Develop and report on trends and provide focus and situational awareness on all issues to SOC leadership.</li><li>
Required to perform duties outside of normal work hours based on business needs.</li><li>
Working in a shift is required for this role and you will be allocated to one of the following:</li></ul>
Morning Shifts (06:00am-03:00pm)<ul><li>
Shift A: Tuesday -&gt; Saturday</li><li>
Shift B: Sunday -&gt; Thursday</li></ul>
General Shifts (11:30am-8:30pm):<ul><li>
Shift C: Tuesday -&gt; Saturday</li><li>
Shift D: Sunday -&gt; Thursday</li></ul>
Experience Required:<ul><li>
Overall 3-5 years of I.T. and/or information security experience.</li><li>
Minimum 1-3 years of experience detecting and responding to cyber intrusions.</li><li>
Experience leveraging the Cyber Kill Chain and MITRE Attack Framework.</li><li>
Experience using IR tools such as Splunk, Tanium, Volatility, Encase, FTK, SIFT, REMnux, etc.</li><li>
Deep understanding of the cyber threat landscape, attack surfaces, and threats associated with each.</li><li>
Deep understanding of enterprise security controls in Active Directory/Windows and UNIX environments.</li><li>
Knowledgeable and experienced with Cloud security concepts and tooling.</li></ul>
Experience Desired:<ul><li>
Automating and/or scripting ability in one or more of the following: Python, Perl, Bash and/or Powershell.</li><li>
Experience de-obfuscating potentially malicious content.</li><li>
Experience doing static and dynamic malware analysis.</li></ul>
Education and Training Required:<ul><li>
A degree (bachelor&rsquo;s degree preferred) from an accredited college and four years of satisfactory full-time experience required by the particular position; OR
</li><li>Education and / or experience which is equivalent to the above</li><li>
Relevant certifications such as Security+, CEH, CASP or similar</li></ul>
Primary Skills:<ul><li>
Ability to conduct memory and disk forensics, network traffic analysis, log correlations in support of Incident Response investigations.</li><li>
Thorough knowledge of operating systems, networking, and host analysis.</li><li>
Detailed understanding of attacker tactics, tools, and techniques.</li><li>
Strong communication skills, both written and oral.</li><li>
Strong analytical and investigative mindset</li></ul>
Additional Skills:<ul><li>
Ability to successfully interface with internal clients.</li><li>
Ability to document and explain technical details in a concise, understandable manner.</li><li>
Ability to manage and balance own time among multiple tasks, lead junior staff when required, and to work independently and as part of a team.</li></ul>
About Evernorth Health Services<div><div><div><div><div><div><div>
Evernorth Health Services, a division of The Cigna Group, creates pharmacy, care and benefit solutions to improve health and increase vitality. We relentlessly innovate to make the prediction, prevention and treatment of illness and disease more accessible to millions of people. Join us in driving growth and improving lives.</div></div></div></div></div></div></div></div>

Cyber Security Senior Analyst - HIH - Evernorth

<div>About Evernorth Health Services:
Evernorth Health Services (Evernorth) is the pharmacy, care and benefits solution division of The Cigna Group - a Fortune 16 global health company with 75,000 employees, 186 million customers in more than 30 countries and jurisdictions around the world. Evernorth exists to make the prediction, prevention, and treatment of illness and disease more accessible to millions of people. We do this by creating and connecting premier health services offerings, such as benefits management, pharmacy, care solutions, insights and intelligence.
About Cigna:
The Cigna Group is a global health company committed to improving the health and vitality of individuals and communities around the world and includes products and services marketed under its Cigna Healthcare and Evernorth Health Services subsidiaries. Cigna Healthcare is the health benefits provider of The Cigna Group, serving customers and clients through its U.S. Employer, U.S. Government, and International Health business. Evernorth Health Services is the pharmacy, care and benefits solution division of The Cigna Group.
Position Overview:
This position will support security engineering and operations in collaboration with our global security engineering teams. The role involves supporting security infrastructure and log source monitoring, access provisioning, and security automation workflows. This role will be responsible for performing standard operating procedures for outage handling and log monitoring, responding to incident alerts, performing incident triage, conducting vulnerability scans, and collaborating with operations and development teams.
Education:<ul><li> Any bachelor&rsquo;s degree</li></ul>
Experience:<ul><li> Minimum of 5 &ndash; 8 years of experience in a Security Operations Center or Security Engineering.</li></ul>
Skills:<ul><li>
Strong analytical and technical skills.</li><li>
Innovative thinker with strong communication skills</li><li>
Strong experience with SIEM platforms</li><li>
Familiarity with ITSM platforms.</li><li>
Experience managing and leveraging vulnerability scanning tools</li><li>
Understanding of incident response processes and escalation protocols.</li><li>
Proficiency in scripting or automation (Python, PowerShell, etc.).</li><li>
Strong analytical and troubleshooting skills.</li><li>
Experience working in a 24/7 SOC environment or with follow-the-sun support models.</li><li>
Familiarity with access management and identity governance tools.</li><li>
Exposure to DevSecOps practices and secure integration pipelines</li><li>
Excellent communication and documentation abilities.</li><li>
Proven ability to perform in-depth data analysis and present insights in a clear 
manner</li><li>
Ability to adapt in a dynamic work environment, learn quickly, contribute 
solutions</li><li>
Ability to prioritize and meet timelines and deadlines</li><li>
Advanced problem-solving skills and the ability to work collaboratively with other departments to resolve complex issues with innovative solutions.</li><li>
Carrying out analytics and metrics</li></ul>
Responsibilities:
Core Engineering &amp; Monitoring Functions:<ul><li>
Develop and maintain Standard Operating Procedures (SOPs) for outage handling and log source monitoring in the SIEM.</li><li>
Monitor and respond to ITSM error tickets and alerts.</li><li>
Perform Level 1 triage and response for security incidents and anomalies.</li><li>
Conduct overnight ad-hoc vulnerability scans and ensure timely reporting of findings.</li><li>
Support access setup and provisioning for SOC tools and platforms.</li><li>
Maintain and report on SOC metrics and health checks to ensure operational readiness.</li></ul>
Collaboration &amp; Support:<ul><li>
Coordinate with Operations team for off-hours support and escalation.</li><li>
Engage resources for early morning coverage and integration tasks.</li><li>
Work with development teams to support integration coding and automation efforts (based on talent availability).</li><li>
Collaborate with release management to ensure minimal after-hours impact during change cycles.</li></ul>
About Evernorth Health Services<div><div><div><div><div><div><div>
Evernorth Health Services, a division of The Cigna Group, creates pharmacy, care and benefit solutions to improve health and increase vitality. We relentlessly innovate to make the prediction, prevention and treatment of illness and disease more accessible to millions of people. Join us in driving growth and improving lives.</div></div></div></div></div></div></div></div>

Cyber Security Lead Analyst - HIH - Evernorth

Tadafur Consulting & Training

Bachelor&rsquo;s degree in Computer Science, Information Technology, or Computer Engineering from an accredited institution.<ul><li>Good understanding of networking principles such as DHCP, DNS, TCP/IP, VPNs, VLANs, routing, and switching.</li><li>Basic knowledge of cybersecurity practices, understanding of security threats, and defense/protection techniques.</li><li>Understanding of Network Operations Center (NOC) procedures and Security Operations Center (SOC) operations.</li><li>Experience using network analysis tools such as Nmap and Wireshark.</li><li>Experience with Linux operating systems.</li><li>Holder of a recognized professional certificate such as CCNA or CompTIA Security+.</li><li>Experience completing one or more implementation (simulation) projects in a technical work environment.</li><li>Preference for those with prior experience in government environments.</li><li>Familiarity with communication skills and dealing with work teams.</li><li>Ability to prepare technical reports and submit them to technical management.</li><li>Preference for those with experience in public service.&quot;</li><li>Monitoring and maintaining network components (devices and software), including detecting faults within network components.</li><li>Ensuring network performance and resolving issues affecting internal and external services.</li><li>Analyzing security network (VPN) reports and performing security checks on requests, verifying data according to established procedures.</li><li>Contributing to preparing network performance reports and analyzing KPIs.</li><li>Contributing to preparing security incident (CERT) reports and providing recommendations for resolution.</li><li>Monitoring protection logs related to network components.</li><li>Monitoring the performance of the Internet gateway, cookies station, and any components affecting service quality</li><li>Updating and maintaining network devices.</li><li>Resolving user-related issues concerning internal and external network connectivity; improving the quality of provided services.</li><li>Inspecting systems, ensuring their integrity, and taking necessary actions.</li><li>Committing to full confidentiality in handling data, in accordance with applicable regulations.</li><li>Performing any additional tasks assigned, provided they do not conflict with the nature of the center&rsquo;s and governorate&rsquo;s work.</li></ul>Job Type: Contract Contract length: 12 months

Operator and Monitor of the Infrastructure of the Data Protection and Information Security Center

Mind Stream

Candidate Profile: Senior Cybersecurity ExpertExperience: Minimum 8&ndash;10 years of progressive experience in cybersecurity, with a strong background in securing cloud and on-premises environments, implementing security frameworks, and managing risk across complex infrastructures.Core Competencies<ul><li>Cloud Security: Expertise in securing Microsoft Azure and Google Cloud Platform (GCP) environments, including networking, identity management, and compliance.</li><li>Infrastructure Security: Strong knowledge of Windows/Linux servers, Active Directory, Exchange, and virtualization technologies.</li><li>DevSecOps &amp; Automation: Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform, and container security for Kubernetes/Docker.</li><li>Application &amp; Network Security: Proficient in firewalls (IDS/IPS), Web Application Firewalls (WAF), email filtering, endpoint protection (AV), and Wi-Fi/network security.</li><li>Networking &amp; Security: Advanced experience with EDR (Endpoint Detection &amp; Response), XDR (Extended Detection &amp; Response), and NDR (Network Detection &amp; Response) solutions for proactive threat detection and response.</li><li>SOC &amp; Incident Response: Skilled in Security Operations Center (SOC) services, threat detection, vulnerability management, patching strategies, and SEIM solutions.</li><li>Forensic Investigation: Ability to conduct digital forensics and root cause analysis for security incidents, including evidence collection, chain of custody, and reporting.</li><li>Compliance &amp; Governance: Strong understanding of ISO 27001, policy development, documentation, and regulatory alignment.</li><li>Monitoring &amp; Risk Management: Experience with monitoring solutions, asset management, and service delivery frameworks.</li></ul>Technical Ecosystem Familiarity<ul><li>Cloud Services: Azure Services and Google Cloud Services</li><li>Networking &amp; Security: IDS/IPS, WAF, VPN, secure telephony, EDR/XDR/NDR, routing and switching</li><li>Tools &amp; Processes: Service desk, patching, virtualization, databases</li><li>Governance: Writing policies, procedures, and security documentation</li></ul>Soft Skills<ul><li>Strong analytical and problem-solving abilities</li><li>Excellent communication and stakeholder engagement skills</li><li>Ability to lead security initiatives and mentor junior team members</li></ul>Preferred Certifications<ul><li>CISSP, CISM, CCSP, or equivalent</li><li>ISO 27001 Lead Implementer/Auditor (advantageous)</li><li>GCFA or CHFI for forensic expertise (advantageous)</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>How many years of total cybersecurity experience do you have?</li><li>Do you have at least 8&ndash;10 years of experience in cybersecurity?</li><li>Do you have strong experience securing Microsoft Azure and/or Google Cloud Platform (GCP)?</li><li>Do you have hands-on experience with Infrastructure as Code (IaC) tools such as Terraform?</li><li>Do you have experience in container security (Kubernetes/Docker)?</li><li>How many years of experience do you have working with firewalls, IDS/IPS, WAF, and endpoint security?</li><li>Do you have experience with EDR, XDR, or NDR tools?</li><li>What is your current and expected salary? Notice period?</li></ul>

Senior Cybersecurity Expert

Mindstream

Candidate Profile: Senior Cybersecurity Expert for QatarExperience: Minimum 8&ndash;10 years of progressive experience in cybersecurity, with a strong background in securing cloud and on-premises environments, implementing security frameworks, and managing risk across complex infrastructures.Core Competencies<ul><li>Cloud Security: Expertise in securing Microsoft Azure and Google Cloud Platform (GCP) environments, including networking, identity management, and compliance.</li><li>Infrastructure Security: Strong knowledge of Windows/Linux servers, Active Directory, Exchange, and virtualization technologies.</li><li>DevSecOps &amp; Automation: Hands-on experience with Infrastructure as Code (IaC) tools such as Terraform, and container security for Kubernetes/Docker.</li><li>Application &amp; Network Security: Proficient in firewalls (IDS/IPS), Web Application Firewalls (WAF), email filtering, endpoint protection (AV), and Wi-Fi/network security.</li><li>Networking &amp; Security: Advanced experience with EDR (Endpoint Detection &amp; Response), XDR (Extended Detection &amp; Response), and NDR (Network Detection &amp; Response) solutions for proactive threat detection and response.</li><li>SOC &amp; Incident Response: Skilled in Security Operations Center (SOC) services, threat detection, vulnerability management, patching strategies, and SEIM solutions.</li><li>Forensic Investigation: Ability to conduct digital forensics and root cause analysis for security incidents, including evidence collection, chain of custody, and reporting.</li><li>Compliance &amp; Governance: Strong understanding of ISO 27001, policy development, documentation, and regulatory alignment.</li><li>Monitoring &amp; Risk Management: Experience with monitoring solutions, asset management, and service delivery frameworks.</li></ul>Technical Ecosystem Familiarity<ul><li>Cloud Services: Azure Services and Google Cloud Services</li><li>Networking &amp; Security: IDS/IPS, WAF, VPN, secure telephony, EDR/XDR/NDR, routing and switching</li><li>Tools &amp; Processes: Service desk, patching, virtualization, databases</li><li>Governance: Writing policies, procedures, and security documentation</li></ul>Soft Skills<ul><li>Strong analytical and problem-solving abilities</li><li>Excellent communication and stakeholder engagement skills</li><li>Ability to lead security initiatives and mentor junior team members</li></ul>Preferred Certifications<ul><li>CISSP, CISM, CCSP, or equivalent</li><li>ISO 27001 Lead Implementer/Auditor (advantageous)</li><li>GCFA or CHFI for forensic expertise (advantageous)</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>How many years of total cybersecurity experience do you have?</li><li>Do you have at least 8&ndash;10 years of experience in cybersecurity?</li><li>Do you have strong experience securing Microsoft Azure and/or Google Cloud Platform (GCP)?</li><li>Do you have hands-on experience with Infrastructure as Code (IaC) tools such as Terraform?</li><li>Do you have experience in container security (Kubernetes/Docker)?</li><li>How many years of experience do you have working with firewalls, IDS/IPS, WAF, and endpoint security?</li><li>Do you have experience with EDR, XDR, or NDR tools?</li><li>What is your current and expected salary? Notice period?</li></ul>

Mindrift

<div>
 
 
 This opportunity is only for candidates currently residing in the specified country. Your location may affect eligibility and rates. Please submit your resume in English and indicate your level of English proficiency.
 
 
 
 
 At Mindrift, innovation meets opportunity. We believe in using the power of collective intelligence to ethically shape the future of AI.
 
 
 
 What We Do
 
 
 
 The Mindrift platform connects specialists with AI projects from major tech innovators. Our mission is to unlock the potential of Generative AI by tapping into real-world expertise from across the globe.
 
 
 
 About The Role
 
 
 
 GenAI models are improving very quickly, and one of our goals is to make them capable of addressing specialized questions and achieving complex reasoning skills. If you join the platform as an AI Tutor in Coding, you'll have the opportunity to collaborate on these projects.
 
 
 Although every project is unique, you might typically:
 
 
 <ul>
 <li>
 Analyze and investigate simulated security alerts and incidents across endpoints, identities, and cloud environments
 </li>
 <li>
 Conduct proactive threat hunting using KQL or similar query languages to identify hidden vulnerabilities and emerging threats that automated systems may miss
 </li>
 <li>
 Assess the accuracy and depth of AI-generated security incident reports and threat analyses
 </li>
 <li>
 Review, validate, and improve the model's understanding of Microsoft Defender products and SOC workflows
 </li>
 <li>
 Provide expert feedback on AI performance in identifying and classifying cybersecurity threats
 
 
 </li>
 </ul>
 
 How To Get Started
 
 
 
 Simply apply to this post, qualify, and get the chance to contribute to projects aligned with your skills, on your own schedule. From creating training prompts to refining model responses, you'll help shape the future of AI while ensuring technology benefits everyone.
 
 
 
 Requirements
 
 
 
 <ul>
 <li>
 You hold a Bachelor's or Master's Degree in Computer Science, Information Security / Cybersecurity, Digital Forensics, Network or Computer Engineering or other related fields. Recognized industry certification (e.g., SC-200, AZ-500, CISSP, CEH, GCIH, CSA, CompTIA Security+) is preferred
 </li>
 <li>
 You have at least 3 years of hands-on experience in cybersecurity operations, incident response, or threat detection.
 </li>
 <li>
 You have a proven background working in Security Operations Centers (SOC).
 </li>
 <li>
 You are able to investigate, triage, and respond to complex security incidents across endpoints, identities, and cloud environments
 </li>
 <li>
 You are proficient in Microsoft Defender products (Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps) and familiar with Microsoft Sentinel or similar SIEM tools (Splunk, QRadar, Elastic)
 </li>
 <li>
 You have strong analytical and problem-solving skills with experience using KQL (Kusto Query Language) or equivalent log analysis tools for threat detection and investigation
 </li>
 <li>
 You have prior experience in threat intelligence, vulnerability management, or incident correlation
 </li>
 <li>
 Your level of English is advanced (C1) or above
 </li>
 <li>
 You are ready to learn new methods, able to switch between tasks and topics quickly and sometimes work with challenging, complex guidelines
 </li>
 <li>
 Our freelance role is fully remote so, you just need a laptop, internet connection, time available and enthusiasm to take on a challenge
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 
 Why this freelance opportunity might be a great fit for you?
 
 
 
 <ul>
 <li>
 Get paid for your expertise, with rates that can go up to $65/hour depending on your skills, experience, and project needs
 </li>
 <li>
 Take part in a part-time, remote, freelance project that fits around your primary professional or academic commitments
 </li>
 <li>
 Work on advanced AI projects and gain valuable experience that enhances your portfolio
 </li>
 <li>
 Influence how future AI models understand and communicate in your field of expertise
 </li>
 </ul>
</div>

Freelance Cybersecurity Analyst - AI Trainer

Search 10000+ Security operations center (soc) analyst jobs near you this December. New roles added regularly across leading industries. Apply today.

10000 security operations center (soc) analyst jobs NEAR_ME

Sr Security Operations Center (SOC) Analyst

Cyber Security Senior Analyst - HIH - Evernorth

Cyber Security Lead Analyst - HIH - Evernorth

Operator and Monitor of the Infrastructure of the Data Protection and Information Security Center

Senior Cybersecurity Expert

Senior Cybersecurity Expert

Freelance Cybersecurity Analyst - AI Trainer