security operations center analyst

Lenovo

<div>
 
 PFB the JD:
 
 
 
 
 
 Job Description
 
 
 
 
 Security Operations Centre (SOC) Analyst plays a vital role in Security delivery. As a SOC Analyst Level 3, you will be on the front line of Cyber Defense, detecting &amp; responding to Cyber Incidents as they happen. You will work with other team members to provide situational awareness through detection, containment, and remediation of IT threats. This job requires great attention to detail and general awareness of Cyber Security tools like SIEM, XDR, EDR, IDS/ IPS, ability understand various logs - network logs, sys logs, Firewall logs. As a SOC Analyst you are expected to have working knowledge in areas of networking, malware analysis, incident response, vulnerability management.
 
 
 * Threat &amp; vulnerability analysis
 
 
 * Investigate, document &amp; report Information security issues &amp; emerging trends
 
 
 * Analysis &amp; response to unknown vulnerabilities
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 As a SOC Analyst - Level 3, you will:
 
 
 * Operate as detection and security incident response subject-matter expert
 
 
 * Technical subject-matter expert in SOC/ SIEM and supporting technologies (EDR, UEBA, etc.) to develop custom queries (e.g., KQL) and playbooks for the SOC analysts to utilize in their investigations.
 
 
 * Align and maintain detection capability to the Mitre attack framework.
 
 
 * Perform root cause analysis of detection failures, identify areas for improvement.
 
 
 * Drive the continuous development of detection capability for SOC
 
 
 * Manage, investigate, and resolve complex issues with the Security tooling.
 
 
 * Securely configure the SIEM, and other SOC solutions in accordance with relevant policy and regulation
 
 
 * Support the Threat hunters in executing complex data analysis.
 
 
 * Provide a point of escalation for SOC/ security detection technical service issues.
 
 
 * Ensure the relevant security tools are compliant with company standards and governance.
 
 
 * Contribute to existing Policy, procedures and process documentation enhancements
 
 
 * Define and implement technical governance processes for security tooling of SOC, SIEM and other security tools including AV, EDR, Defender Cloud.
 
 
 * Create and review detection technology high and low level designs.
 
 
 * Propose and identify automation opportunities resulting from incidents;
 
 
 * Provide recommendations to the Client team, on how to mitigate or avert the occurrence of any suspicious activity within their environment.
 
 
 * Provide In depth analysis to the user/customer about the security incidents (eg. Phishing attack)
 
 
 * Troubleshoot connector/ logger/ Manager for log retrievals
 
 
 
 
 * Prepare SOC Management Reports.
 
 
 * Analyzing &amp; preparing daily and monthly reports based on the devices which are being monitored
 
 
 * Creating Reports and Dashboards based on the customer requirement.
 
 
 * Creating Queries for the Rules requested by client for real time alerts.
 
 
 * Creating Reports which helps in providing the logs for the alerts, for finding any possible threats.
 
 
 
 
 * Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths.
 
 
 * Independently follow procedures to contain, analyze, and eradicate malicious activity.
 
 
 
 
 * Change Management/ Implementation: Independently implement changes to meet customer infrastructure needs within area of technical responsibility
 
 
 * Patch and Security Management: Apply patch and security changes per policy.
 
 
 * Configuration Management: Review Configuration Management Database (CMDB) entries to ensure they are complete and accurate.
 
 
 * Quality: Provide continual improvement recommendations for direct responsibility area (process improvement, technical standard updates, etc).
 
 
 * Project Management: Lead &amp; participate in customer and internal projects, including transformation.
 
 
 * Customer Relationship Management: Set expectations with customers and/or internal businesses/end users within defined parameters.
 
 
 * Teamwork: Work as part of a team, which may be virtual and/or global. Participate as part of a team and maintains good relationships with team members and customers
 
 
 
 
 
 
 Skill
 
 
 
 
 8 - 12 years of relevant experience
 
 
 
 
 Typical skills include:
 
 
 * Fine-tune SIEM and other SOC tooling to exclude noise and false positives
 
 
 * Create and fine-tune content in SIEM - correlation rules, Dashboard and Reports etc
 
 
 * Interact with SIEM, EDR and NDR vendors (TAC Support) to remediate any issues with tooling
 
 
 * Evaluate new solutions for SOC
 
 
 * Identify opportunities to improve overall capacity, playbook and runbook
 
 
 * Understanding of threat landscapes and threat modelling, security threat and vulnerability management, and security monitoring
 
 
 * Working knowledge of tools and techniques used by attackers to gain entry into corporate networks, including common IT system flaws and vulnerabilities.
 
 
 * Knowledge of industry standards such as ISO 27001, HIPAA, FedRAMP, Cloud Security Alliance, NIST frameworks and risk methodologies
 
 
 * Demonstrated experience in communicating complex security concepts, both verbally and in writing, to a variety of audiences
 
 
 * Must take ownership of tasks and demonstrate high degree of autonomy to ensure completion
 
 
 * Excellent understanding of related technologies (Networking, Operating Systems)
 
 
 * General Project Management (Expert)
 
 
 * Customer/Vendor Management (IExpert)
 
 
 * Business Analysis (Expert)
 
 
 * Has ability to perform/drive resolution of problems on individual products.
 
 
 * Able to communicate broad and specific concepts with team and to peers.
 
 
 * Able to produce documentation for use by team and customer.
 
 
 * Able to perform/drive resolution of problems on combinations and interactions of products
 
 
 * Strong verbal &amp; written communication skills
 
 
 * Proactive approach to meet &amp; exceed goals
 
 
 
 
 
 
 Qualification &amp; Experience
 
 
 
 
 Bachelor&rsquo;s degree in engineering (Electronics, Communication, Computer Science)
 
 
 
 
 8 - 12 years of relevant experience in SOC domain
 
 
 
 
 Strong understanding ITIL process
 
 
 
 
 Recognized Cyber Security certifications, such as CISSP, CISM, SANS, SABSA, OSCP are advantageous.
 
 
 
 
 Microsoft Security and compliance certifications such as SC-200, MS-500 and AZ-500 preferred
 
 
 
</div>

Security Operations Center Analyst

i4 Solutions

<div>
 Date: Oct 2, 2025
 
 
 Location:
 
 
 Doha, QA
 
 
 Company: i4 Solutions W.L.L
 
 
 Req ID: 2273
 
 
 
 Job Title
 
 
 
 SOC Analyst
 
 
 
 Job Scope
 
 
 
 The SOC analyst will monitor and fight threats on behalf of our client's IT infrastructure, and to assess security systems and measures for weaknesses and possible improvements. The SOC analyst is responsible for ensuring the protection of digital assets from unauthorized access, both online (cloud) and on premise for our client's networks against cybersecurity threats such as hackers, Cyber-terrorists and malware that can steal or corrupt sensitive customer data.
 
 
 
 Main Duties And Responsibilities
 
 
 
 Technical and Operations
 
 
 <ul>
 <li>
 Identify, secure, and weed out the threats as front-line defense personnel
 </li>
 <li>
 Monitor, manage, and configure security tools, review incidents to assess their urgency, and escalate incidents if necessary
 </li>
 <li>
 Operate as an incident responder (Tier 2), remediating serious attacks, assessing the scope of the attack and affected systems, and collecting data for further analysis
 </li>
 <li>
 Analyze a breach within our client's environment to reach the root cause and remediation steps to limit risk
 </li>
 <li>
 Generate security reports for our clients, that serve as an input to evaluate the efficacy of the security policies
 </li>
 <li>
 Advise on what our clients should implement as part of the necessary changes required to counter the attack or improvise security standards
 </li>
 <li>
 Act as first line of defense as part of our managed security services for our clients to document incidents and contribute to incident response and disaster recovery plans if required
 
 
 
 </li>
 </ul>
 Talent Development
 
 
 <ul>
 <li>
 Lead and coach the team cultivating empowerment and ownership
 </li>
 <li>
 Develop capabilities and secure a solid succession plan
 </li>
 <li>
 Conduct regular performance reviews, identify training needs and oversee development plans
 
 
 
 </li>
 </ul>
 
 Position Requirements
 
 
 
 
 Education
 
 
 
 Bachelor&rsquo;s degree in Information Technology, Computer Science or any other related field
 
 
 
 Experience
 
 
 
 At least 3 years in a Security Operations Center (SOC) related to MSS environment
 
 
</div>

SOC Analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
 
 Work as a Cyber SOC Tier 1 Analyst in DTS Solution HawkEye CSOC cyber command center. </li>
 <li>
 
 The security analyst Tier 1 monitors security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity, escalate to managed service support teams, tier 2 security analyst, and/or customer as appropriate to perform further investigation and resolution. </li>
 <li>
 
 Reviews trouble tickets generated by SIEM Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack. </li>
 <li>
 
 Reviews and collects asset data (configs, running processes, etc.) on systems for further investigation. </li>
 <li>
 
 Will actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, and will provide proactive threat research. </li>
 <li>
 
 Work closely with the Tier 2 Analyst to assess risk and provide recommendations for improving DTS Solution - HawkEye CSOC s customer security posture. </li>
 <li>
 
 Participate in security incident management and vulnerability management processes. Identify, perform, review or track security incident investigations to resolution and identify lessons learnt. </li>
 <li>
 
 Identify, perform or review root cause analysis efforts following incident recovery to enhance operations. </li>
 <li>
 
 Participate in evaluating, recommending, implementing, and troubleshooting security. solutions and evaluating IT security of the new IT Infrastructure systems. </li>
 <li>
 
 Ensure that corporate data and technology platform components are safeguarded from known threats. </li>
 <li>
 
 Develop, implement and test new SIEM use cases. Regularly identify and develop new use cases for automation and tuning of security tools </li>
 <li>
 
 Provide technical guidance to the customer s technical teams during the configuration of new log sources. </li>
 <li>
 
 Understanding and implementing the SOC processes and procedures. </li>
 <li>
 
 Follow standard operating procedures for detecting, classifying, and reporting. </li>
 <li>
 
 Triage events for criticality and escalate according to predefined processes incidents under the supervision of Tier 2 and Tier 3 staff. </li>
 <li>
 
 Communicate effectively with customers, team-mates, and management. </li>
 <li>
 
 Provide input on tuning and optimization of security systems. </li>
 <li>
 
 Follow ITIL practices regarding incident, problem and change management. </li>
 <li>
 
 Document and maintain customer build documents, security procedures and processes. </li>
 <li>
 
 Stay up to date with current vulnerabilities, attacks, and countermeasures. </li>
 <li>
 
 Reviews the latest alerts to determine relevancy and urgency. </li>
 <li>
 
 Creates new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review. </li>
 <li>
 
 Manages and configures security monitoring tools (SIEM, SYSLOG, NETFLOW, FIM, SYSMON etc.) </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 3+ years of experience of network/security architecture or operations experience </li>
 <li>
 
 Experience working on specific SOC/SIEM platforms </li>
 <li>
 
 Excellent experience in Elastic (ELK), Splunk, Wazuh, LogRhythm </li>
 <li>
 
 Experience in SOAR technologies Demisto, Cybersponse, FortiSOAR, Swimlane </li>
 <li>
 
 Excellent experience in MDR or EDR </li>
 <li>
 
 Experience in using security tools commercial and open source </li>
 <li>
 
 Experience in defensive technologies NGFW, AV, VPN, IPS, NETFLOW, DAM, WAF, Proxy, Web Filtering etc. Ability to inspect using PCAP files. </li>
 <li>
 
 Knowledge with Threat Hunting and MITRE ATT&amp;CK Methodology </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
 
 GIAC Certified Intrusion Analyst (GCIA) </li>
 <li>
 
 GIAC Certified Enterprise Defender (GCED) issued by GIAC </li>
 <li>
 
 GIAC Certified Incident Handler (GCIH) issued by GIAC </li>
 <li>
 
 Certified Ethical Hacker (CEH) issued by EC-Council </li>
 <li> </li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

SOC Analyst - Tier 1

Halan - حالا

<div>
 
 
 Job Summary:
 
 
 
 
 
 
 
 We are seeking a dedicated and detail-oriented SOC Analyst with 2-3 years of experience to join our Security Operations Center (SOC) team. The ideal candidate will be responsible for monitoring, detecting, and responding to security incidents to protect our organization&rsquo;s information assets.
 
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 
 <ul>
 
 <li>
 
 Monitor Security Alerts: Continuously monitor security alerts from SIEM solution and various security tools and systems.
 
 </li>
 
 <li>
 
 Incident Response: Investigate and respond to security incidents, including malware infections, unauthorized access, and other security breaches and act as the first responder to security incidents by analyzing, containing, and mitigating threats.
 
 </li>
 
 <li>
 
 Log Analysis: Analyze logs from SIEM solution including systems, firewalls, intrusion detection/prevention systems, and other security devices to identify potential threats.
 
 </li>
 
 <li>
 
 Coordinate and support the containment and eradication of security incidents. Provide guidance and support to other IT teams, Development teams and stakeholders on security incident response and remediation.
 
 </li>
 
 <li>
 
 Threat Intelligence: Stay updated on the latest threat landscape, including new vulnerabilities, exploits, and attack vectors, and apply threat intelligence to identify and mitigate potential security threats, security weaknesses and recommend actions.
 
 </li>
 
 <li>
 
 Ensure that security significant logs are available in SOC monitoring tools for analysis and investigation.
 
 </li>
 
 <li>
 
 Documentation: Maintain detailed documentation of security incidents, including the actions taken and the outcomes.
 
 </li>
 
 <li>
 
 Collaboration: Work closely with other IT and security teams to ensure a coordinated response to security incidents.
 
 </li>
 
 <li>
 
 Reporting: Prepare and present reports on security incidents and trends to management.
 
 </li>
 
 </ul>
 
 
 
 
 
 Requirments:
 
 
 
 
 
 <ul>
 
 <li>
 
 Bachelor&rsquo;s degree in computer science, Information Technology, Cybersecurity, or a related field.
 
 </li>
 
 <li>
 
 4+ years of experience in a SOC or similar security role.
 
 </li>
 
 <li>
 
 Relevant certifications such as CompTIA Security+, CEH, or equivalent are preferred.
 
 </li>
 
 <li>
 
 Proficiency with SIEM tools (e.g., FortiSIEM, Splunk, QRadar).
 
 </li>
 
 <li>
 
 Knowledge of network protocols and security technologies.
 
 </li>
 
 <li>
 
 Experience with incident response and handling.
 
 </li>
 
 <li>
 
 Familiarity with threat intelligence platforms and methodologies.
 
 </li>
 
 <li>
 
 Strong analytical and problem-solving skills.
 
 </li>
 
 <li>
 
 Excellent communication and teamwork abilities.
 
 </li>
 
 <li>
 
 Attention to detail and ability to work under pressure.
 
 </li>
 </ul>
</div>

ARUP Laboratories

<div>Schedule: 
Monday - Friday (40 hrs/wk) 
8:00 AM - 5:00 PM

Department: IT General - 210

Primary Purpose:

The Vulnerability Analyst conducts extensive research on newly discovered vulnerabilities in operating systems, application software, infrastructure, and firewalls. Serves as a senior technical leader within the Security Operations Center (SOC), responsible for overseeing enterprise-wide vulnerability management strategies. This role investigates, analyzes, and develops methods for exploiting such vulnerabilities. The analyst performs Security Impact Analysis (SIA) to determine how proposed or completed changes to information systems affect overall security. This process involves assessing potential vulnerabilities and risks introduced by modifications to components such as operating systems, networks, software, and security controls. The Vulnerability Analyst reports directly to the Security Operations Center (SOC) Manager.

About ARUP:

ARUP Laboratories is a national clinical and anatomic pathology reference laboratory and an enterprise of the University of Utah and its Department of Pathology. Based in Salt Lake City, Utah.

ARUP proudly hires top talent to create a work environment of diversity, professional growth and continuous development. Our workforce is committed to the important service we provide to over one million patients each month. We always strive for excellence and have a strong desire to have involvement with the advances in medicine and the role laboratory services plays within each patient&rsquo;s life. We never forget that there is a patient behind every specimen we receive.

We are looking for individuals who want to contribute to ARUP's culture of accountability, integrity, service, and excellence. Consider joining our dynamic team.

Essential Functions:

Lead advanced cyber vulnerability assessments of applications, systems, vendor IT networks, and cloud architecture.

Analyze and validate scan results, correlate findings, and determine severity and risk impact to prioritize remediation efforts.

Maintain and update vulnerability tracking systems, dashboards, and compliance reports.

Develop and present reports, briefs, and metrics to communicate vulnerability status, remediation progress, and compliance standing to leadership.

Stay informed about emerging vulnerabilities, CVEs, threat intelligence, and cybersecurity best practices.

Conduct comprehensive risk assessments of IT systems, applications, and business processes, recommending improvements to security controls.

Maintain detailed risk registers by analyzing threat intelligence and vulnerability data to identify emerging risks.

Develop and perform cybersecurity risk assessments and mitigation strategies.

Collaborate with administrators, DevOps teams, researchers, Change Approval Board (CAB), and IT Tech Debt Committee to identify, prioritize, and remediate vulnerabilities.

Lead efforts with remediation teams, system owners, and senior security staff to track and resolve identified vulnerabilities.

Apply advanced techniques threat modeling, penetration testing, and exploit development techniques to identify risks across on-premises and cloud environments.

Contribute to recurring cyber vulnerability updates and prepare executive-level summaries of findings for senior leadership.

Provide subject matter expert support in incident response investigations and provide technical recommendations to strengthen system defenses.

Develop and deliver training and awareness programs for team members and stakeholders on vulnerability identification, remediation, and secure system design practices.

Provide expert support to the Security Operations Center (SOC) Tier 1 and Tier 2 Analyst teams as needed in performing threat detection and incident response.

Physical Requirements:

Stooping: Bending body downward and forward by bending spine at the waist.

Reaching: Extending hand(s) and arm(s) in any direction.

Mobility: The person in this position needs to occasionally move between work sites and inside the office to access file cabinets, office machinery, etc.

Communication: The person in this position will work in a highly collaborative environment which requires frequent, clear, and professional communication with others.

PPE: Biohazard laboratory environment that requires use of personal protective equipment in accordance with CDC and OSHA regulations and company policies.

ARUP Policies and Procedures: To conduct self in compliance with all ARUP Policies and Procedures.

Sedentary Work: Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.

Fine Motor Control: Picking, pinching, typing or otherwise working on computer equipment.

Vision: Having close, far, and peripheral visual acuity to perform a variety of tasks such as making general observations of depth and distance.<h4 class="jobSectionHeader">
Experience</h4>
Required<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related field</li><li>
Six (6) years of cybersecurity experience, including at least 4 years focused on vulnerability analysis, penetration testing, or cyber risk management</li><li>
Strong understanding of security frameworks (e.g., NIST, MITRE ATT&amp;CK)</li><li>
Experience with vulnerability scanning tools</li><li>
Experience with EDR solutions</li><li>
Excellent communication, analytical, and problem-solving skills</li><li>
Deep knowledge of NIST, ISO/IEC 27001, HITRUST frameworks</li></ul>
Preferred<ul><li>
Relevant certifications (e.g., CISSP, CISM, CEH, CND, GCIA, GCIH)</li><li>
Experience in healthcare or laboratory environments preferred</li><li>
Master&rsquo;s degree in Cybersecurity, Information Technology, or related field</li></ul><h4 class="jobSectionHeader">
Education</h4>
Required<ul><li>
Bachelor's Degree or better in Cybersecurity or related field</li></ul>
Preferred<ul><li>
Master's Degree or better in Cybersecurity or related field</li></ul>
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities 
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.</div>

Vulnerability Analyst IV

KiZAN Technologies

<div><div>SOC Analyst - Level II</div>
<div>Location: Cincinnati, OH or Remote</div>
<div>Employment Type: Full-Time</div> 
<div></div>
<div>**KiZAN is open to remote candidates for this position. Candidates must be US based and able to work the majority of their time in EST.</div> 
<div></div>
<div>About KiZAN:</div>
<div>We make technology personal! 
</div><div>KiZAN is an Industry leading Microsoft Professional Services and Managed Services Provider supporting Regional, National and Global clients. We personalize technology by sparking passion, fueling purpose, and building connections.</div> 
<div></div>
<div>Here at KiZAN, we are one team, we support each other and take the initiative to solve problems. We are fully committed to the direction chosen and always support our mission. Being a part of KiZAN means that we win together, we create an inclusive atmosphere where everyone feels accepted, a sense of purpose, and we embrace collaboration.</div> 
<div></div>
<div>OVERVIEW
A Level 2 Analyst is a subject matter expert responsible for managing threats, disseminating information, and handling, responding to and investigating all incident escalations from the Security Operations Center. Level 2 team members are responsible for coordinating with the CSIRT process when necessary and managing incidents throughout the event life cycle. Level 2 team members will further an investigation and ensure root cause and resolution for metrics, tracking, and lessons learned are compiled, documented, and disseminated in conjunction with the CIRT process.
They will provide insight and expertise to examine malicious code (malware), attack vectors, network communication methods, analyze threats against target systems and networks, determine target network capabilities and vulnerabilities, support development and maintenance of new tools and techniques to exploit specific targets, and produce technical after-action reports in support of the SOC. Level 2 members will be the focal point for critical security Alert, Events, and Incidents and will serve as subject matter experts in providing recommendations to the SOC Incident Manager and other members of Information Security and IT management for escalation and remediation. Level 2 Analysts are also responsible for training and mentoring their Level 2 and Level 1 peers to improve SOC Analyst capability. Finally, Level 2 members will work with the SIEM/SOAR Engineers to develop and refine use cases within Microsoft Sentinel focusing on emerging threats.
The SOC Analyst reports to the SOC Manager and works in conjunction with the other team members to keep projects delivered on time and within budget.
JOB REQUIREMENTS
Knowledge and Experience
To be successful in this position, a candidate should have at least two years of hands-on experience as a Level 2 SOC analyst leveraging Microsoft Sentinel, M365 Defender products, and Microsoft Defender for Cloud in production environments. Teamwork and collaboration skills will be critical for this role. The ideal candidate will have knowledge of and experience with the SOC framework and be confident in their ability to make recommendations to improve upon operations.
Certification Path
At a minimum, the Microsoft Security Operations Analyst (SC-200) and Microsoft Cybersecurity Architect (SC-100) certifications or the ability to get one within 180 days of being hired. Training materials provided and the cost of the relevant tests will be covered.
Within year one employment, one of the following or otherwise approved additional certifications will be obtained: ITIL, CISSP, GSEC, CISA, SEC+, CEH, CySA+, AZ-500, MS-500.
AREAS OF RESPONSIBILITY
The SOC Analyst must be able to perform the following duties unassisted or with some reasonable accommodation made by the organization:
Cybersecurity Operations:
<ul><li>Cybersecurity Analysis, Detection and Response: 40%
 <ul><li>Manage SOC event and information intake to include gathering intelligence reports, monitoring ticket queues, investigating reported incidents, and interacting with other security and network groups as necessary.</li>
<li>Continuously monitor network traffic and systems for security anomalies, intrusions, or breaches. Perform research and use systems and tools in places, such as SIEM, XDR, NAC, and other</li>
<li>Investigate Level 1 escalated Incidents.</li>
<li>Ensure SOC Triage Tagged Incidents are addressed in a timely manner using available reporting and metrics.</li>
<li>Monitor Level 1 Analyst performance investigating incoming Incidents using SOC-available tools.</li>
<li>Respond to attempted efforts to compromise security controls using documented procedures.</li>
<li>Participate in incident response exercises.</li>
<li>Coordinate with SIEM Engineers to tune Alerts and Events</li>
</ul></li><li>Cybersecurity Vulnerability and Threat Mitigation: 40%
<ul><li>Perform regular vulnerability assessments and security analyst of information technology systems.</li>
<li>Create reports showing risk and priorities and share findings with appropriate stakeholders and coordinate with them to implement security patches and other mitigation</li>
</ul></li><li>SOC process refinement and cross training: 20%
<ul><li>Improve SOC processes to elevate response efficiency.</li>
 <li>Consult the organization on security tool improvements for customers.</li>
 <li>Mentor Level 2/Level 1 Analysts to improve detection/analytical capabilities within the SOC.</li>
<li>Interview potential SOC resources and provide feedback.</li>
<li>Drive and monitor shift-related metrics processes ensuring applicable reporting is gathered and disseminated per SOC requirements.</li>
<li>Serve as shift subject matter experts on incident detection and analysis techniques providing guidance to junior analysts and making recommendations to organizational managers.</li>
<li>Track tactical issues in execution of SOC responsibilities.</li>
</ul></li></ul>Other
<ul><li>Communicate effectively, both orally and in writing, to clearly express ideas and opinions.</li>
<li>Demonstrates teamwork, is receptive to and acts upon input from others, is willing and able to compromise as needed, displays willingness to work with all firm employees, and willingly assists others.</li>
<li>Demonstrates initiative and contributes new ideas; is self-motivated.</li>
<li>Demonstrates flexibility; willing to adjust to changes, able to work with all levels of firm employees.</li>
<li>Works with tight deadlines and under pressure.</li>
<li>Always exhibits positive leadership characteristics to the team, both in terms of improving processes and procedures and being proactive about the nature and scope of the team&rsquo;s work.</li>
<li>Generates and maintains documentation on SOC procedures performed and publishes such materials as appropriate.</li>
<li>Travels to any office location when needed, with at least a one (1) week notice.</li>
<li>Willing and able to work extended hours and rotate on-call duties to ensure customer incident response.</li>
<li>Performs other duties, responsibilities, and special projects, as requested.</li>
</ul>EEO/AA Employer</div></div>

SOC Analyst - Level II

Public Partnerships LLC

<div>It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business.
Public Partnerships LLC supports individuals with disabilities or chronic illnesses and aging adults, to remain in their homes and communities and &ldquo;self&rdquo; direct their own long-term home care. Our role as the nation&rsquo;s largest and most experienced Financial Management Service provider is to assist those eligible Medicaid recipients to choose and pay for their own support workers and services within their state-approved personalized budget. We are appointed by states and managed healthcare organizations to better serve more of their residents and members requiring long-term care and ensure the efficient use of taxpayer funded services. Our culture attracts and rewards people who are results-oriented and strive to exceed customer expectations. We desire motivated candidates who are excited to join our fast-paced, entrepreneurial environment, and who want to make a difference in helping transform the lives of the consumers we serve. (learn more at www.pplfirst.com).
Job Title: SOC Analyst
Department: CC1025 Compliance &amp; Cybersecurity (CORE) 
Location: Latham - NY 
Reports To: CISO 
Employment Type: Full-Time
It's fun to work in a company where people truly BELIEVE in what they're doing!
Job Summary:
We are seeking a skilled and motivated SOC Analyst to join our Security Operations Center team. In this role, you will be responsible for monitoring, analyzing, and responding to security threats using a variety of tools and technologies. The ideal candidate will possess strong technical expertise, analytical thinking, and a proactive approach to detecting and mitigating cybersecurity risks.
Key Responsibilities:<ul><li>
Support both cybersecurity and fraud investigations by correlating digital forensics artifacts with behavioral indicators and transaction logs.</li><li>
Perform forensic analysis on endpoints, servers, cloud infrastructure, and logs to investigate and reconstruct cyber and fraud incidents.</li><li>
Collaborate with fraud, compliance, and legal teams to investigate suspicious financial or identity-based activities.</li><li>
Use tools such as endpoint forensics platforms, packet analyzers, and case management systems to support investigative workflows.</li><li>
Develop threat profiles and fraud detection patterns to enhance correlation rules and proactive alerting.</li><li>
Monitor security alerts and events from SIEM (Security Information and Event Management) and other sources.</li><li>
Monitor and analyze application logs (e.g., authentication, transaction, API activity) to detect security anomalies and potential fraud indicators.</li><li>
Analyze security incidents to determine impact, scope, and root cause.</li><li>
Respond to and contain security incidents, coordinating with internal teams as needed.</li><li>
Create, update, and maintain incident tickets with detailed information and findings.</li><li>
Conduct triage on alerts, prioritize security events, and escalate as necessary.</li><li>
Perform threat hunting and anomaly detection using endpoint and network data.</li><li>
Maintain awareness of current threats, vulnerabilities, and attack vectors.</li><li>
Assist in the creation and tuning of detection rules, dashboards, and reports.</li><li>
Participate in post-incident reviews and support forensic investigations.</li><li>
Collaborate with IT and security teams to implement security best practices.</li><li>
Develop and maintain SOC documentation, including SOPs and runbooks.</li></ul>
Required Qualifications:<ul><li>
Bachelor&rsquo;s degree in computer science, Cybersecurity, Information Technology, or a related field, or equivalent experience.</li><li>
2+ years of experience in a security operations, incident response, or similar cybersecurity role.</li><li>
Experience with SIEM tools (e.g., Splunk, QRadar, LogRhythm, ArcticWolf, DataDog).</li><li>
Understanding of network protocols, operating systems, and common threat actor techniques (MITRE ATT&amp;CK framework).</li><li>
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, and endpoint detection tools.</li><li>
Strong analytical, problem-solving, and communication skills.</li><li>
Ability to work in a 24/7 on-call rotation or shift-based environment if required.</li></ul>
Preferred Qualifications:<ul><li>
Security certifications such as CompTIA Security+, CEH, GCIA, GCIH, or SSCP.</li><li>
Experience with scripting languages (e.g., Python, PowerShell) for automation.</li><li>
Knowledge of cloud security (AWS, Azure, or GCP).</li><li>
Experience in vulnerability management and threat intelligence.</li></ul>
What We Offer:<ul><li>
Competitive salary and benefits package.</li><li>
Opportunities for professional development and certification.</li><li>
A collaborative and inclusive team environment.</li><li>
Flexible work arrangements (remote/hybrid options may be available).</li></ul>
Salary Range: $110,000- $120,000
The above is intended to describe the general contents and requirements of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive statement of all duties, responsibilities, or skills of personnel so classified.
This position may have access to private, confidential or sensitive information related to PPL, its customers or clients, or patient information. Employees in this position are required to complete new hire and annual training for privacy and security, complete attestations for the PPL Code of Conduct, The Employee Handbook, and satisfactorily pass a background screen before access to any PPL information will be granted.
PPL is an Equal Opportunity Employer dedicated to celebrating diversity and intentionally creating a culture of inclusion. We believe that we work best when our employees feel empowered and accepted, and that starts by honoring each of our unique life experiences. At PPL, all aspects of employment regarding recruitment, hiring, training, promotion, compensation, benefits, transfers, layoffs, return from layoff, company-sponsored training, education, and social and recreational programs are based on merit, business needs, job requirements, and individual qualifications. We do not discriminate on the basis of race, color, religion or belief, national, social, or ethnic origin, sex, gender identity and/or expression, age, physical, mental, or sensory disability, sexual orientation, marital, civil union, or domestic partnership status, past or present military service, citizenship status, family medical history or genetic information, family or parental status, or any other status protected under federal, state, or local law. PPL will not tolerate discrimination or harassment based on any of these characteristics.
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!
If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!</div>

Search 10000+ Security operations center analyst jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 security operations center analyst jobs NEAR_ME

Security Operations Center Analyst

SOC Analyst

SOC Analyst - Tier 1

SOC Analyst

Vulnerability Analyst IV

SOC Analyst - Level II

SOC Analyst