soc analyst

Koniag

Security Operations Analyst Tuknik Government Services , LLC (TGS), a Koniag Government Services company, is seeking an experienced SOC Analyst to support TGSand our government customer in Durham, NC, Baltimore, MD or Denver, CO.Position Overview: Work in a Security Operations Center (SOC) environment, providing detailed documentation of reported incidents utilizing ServiceNow. The candidate will function as a SOC Analyst performing triage, investigations, and responding to a wide variety of alerts.All employees are considered mission critical and are expected to report even during inclement weather conditions.We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.Essential Functions, Responsibilities &amp; Duties may include, but are not limited to:<ul><li>Providing 24/7/365 monitoring and analysis of security event alerts across the enterprise network.</li><li>Monitoring agency systems and daily log events to identify potential security threats. Sources include, but not limited to, sensor alert logs, firewall logs, content filtering logs, and Security Information and Event Management logs.</li><li>Reviewing incoming alerts, investigating, and ticketing all identified potential security threats using agency incident response ticketing platform.</li><li>Prioritize all incoming alerts and responds accordingly in a timely manner.</li><li>Validating traffic and/or network activity (per alerts/logs) as anomalous in accordance with agency standards and procedures.</li><li>Identifying, investigating, and escalating potential security threats to senior agency resources when needed.</li><li>Measuring and modeling traffic, while identifying patterns and ports.</li><li>Producing reports, both contractual and ad hoc, providing information on events, trends, issues, and activity as requested by the federal customer.</li><li>Providing data for inclusion in the agency&rsquo;s CISA report.</li><li>Utilize OSINT tools to identify and mitigate potential cybersecurity threats to the customer&rsquo;s network.</li><li>Identifying the necessity for, and implementation of, the creation of new intrusion detection signatures.</li></ul>Work Experience, Knowledge, Skills &amp; Abilities:<ul><li>Candidate must have a minimum of 2-4 years of experience as an analyst in a security operations center or similar environment.</li><li>Working knowledge of Security Operations Center systems and the role such systems play in detecting intrusion attempts.</li><li>Documented experience creating custom intrusion signatures to detect specific network traffic anomalies.</li><li>Demonstrated experience in populating sensors with newly available signatures when responding to events or management requests.</li><li>Knowledge of potential threat reporting and tracking by means of at least one large-scale ticketing system (ServiceNow, CAPRS, or other similar system).</li><li>Ability to utilize email, instant messaging, and other monitoring tools to effectively navigate through the incident response process.</li><li>Strong oral presentation skills and the ability to articulate English in a clear and concise manner.</li><li>Demonstrated experience with Windows Operating System and Microsoft 365 tools.</li></ul>Requirements <ul><li>High School Diploma accompanied with related advanced training and certifications in cybersecurity or a related field. BS/BA degree preferred.</li><li>Required certifications include CompTIA Security+. Documented proof of certifications is required prior to the start of employment.</li><li>Experience with Windows Operating System and Microsoft 365 tools.</li><li>Great Written and Communication Skills - Must have the ability to convey information clearly and effectively</li><li>Must live within 2 hours travel of the designated Security Operations Center for which they are applying.</li><li>Must be able to obtain a Public Trust clearance.</li></ul>Nice-to-haves<ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in computer science, or cybersecurity, or information technology.</li><li>Other advanced certifications such as Cybersecurity Analyst+ (CySA+), Certified Ethical Hacker (CEH), or Certified Information System Security Professional (CISSP)</li></ul>Our Equal Employment Opportunity PolicyThe company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, sex, sexual orientation, gender, or gender identity (except where gender is a bona fide occupational qualification), national origin, age, disability, military/veteran status, marital status, genetic information, or any other factor protected by law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits and all other privileges, terms, and conditions of employment.The company is dedicated to seeking all qualified applicants. If you require accommodation to navigate or to apply for a position on our website, please contact Heaven Wood via e-mail at or by calling 703-488-9377 to request accommodation.Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352Pay: $68,125.75 - $82,043.91 per yearBenefits:<ul><li>401(k)</li><li>Dental insurance</li><li>Parental leave</li><li>Retirement plan</li><li>Tuition reimbursement</li></ul>Work Location: In person

SOC Analyst

IT Security C&T

<div>
 
 Company Description
 
 
 
 IT Security C&amp;T is an innovative, fast-growing security consulting and training company. Our management team combined with our consultants and engineers work together to deliver comprehensive security solutions to our customers around the MENA region.
 
 
 IT Security C&amp;T is continuously expanding its team of qualified professionals for a wide range of opportunities. Interested candidates are required to apply via our Career webpage on our website (www.itsecurityct.com)
 
 
 
 Job Description
 
 
 
 The Security Analyst will participate and be part of information security monitoring and incident handling team in order to monitor and manage all information security incidents and risks and solve them as per the business security requirements. The Security Analyst will work and follow-up with the IT Teams and other Business Units to develop action plans to mitigate identified vulnerabilities and promote security initiatives.
 
 
 Key Activities Include:
 
 
 <ul>
 <li>
 Work as part of 24x7 security operation team
 </li>
 <li>
 Monitor the Security Information and Event Management System (SIEM) and follow up all related security incidents and events.
 </li>
 <li>
 Follow the day-to-day operations related to own job to ensure continuity of work
 </li>
 <li>
 Respond to security incidents and report on incident handling and resolution.
 </li>
 <li>
 Participate in forensic analysis and data recovery, and penetration testing.
 </li>
 <li>
 Perform daily security analysis and scanning and assessment for information security risks, threats and vulnerabilities.
 </li>
 <li>
 Proactive research to identify and understand new threats, vulnerabilities, and exploits.
 </li>
 <li>
 Configuration and administration of security systems and tools.
 </li>
 <li>
 Define and evaluate security technologies required to ensure safe technology operation and detection of cyber-attack.
 </li>
 <li>
 Provide the security recommendations on actions which assist in improving security posture within CLIENT Environment.
 </li>
 <li>
 Follow all relevant departmental policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner
 </li>
 <li>
 Participating in reviewing and documenting computer security and emergency gate identified vulnerabilities and promote security initiatives.
 
 
 </li>
 </ul>
 Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in IT, Engineering
 </li>
 <li>
 4+ years of experience in IT/Security operations or SOC role.
 </li>
 <li>
 Network+, CCNA R&amp;S, Security +, Linux security, windows security or forensics training is plus.
 </li>
 <li>
 Professional Security certification preferred (CIHE, CEH, CPTE, or equivalent).
 </li>
 <li>
 Knowledge and experience in network switches, routers and firewalls
 </li>
 <li>
 Knowledge of Microsoft Word, Project, Excel, Access,
 
 
 </li>
 </ul>
 Additional Information
 
 
 
 Location
 
 : Manama-Bahrain
</div>

SOC Analyst L2- Bahrain

Alignerr

<div>
 
 Security Operations Analyst (AI Training)
 
 
 
 
 About The Role
 
 
 
 We're partnering with leading AI research labs to build the next generation of security-aware AI systems. As a Security Operations Analyst, your hands-on SOC experience will directly shape how AI understands, reasons through, and responds to real-world cyber threats.
 
 
 This is a unique opportunity to apply your threat detection and incident response expertise beyond the SOC &mdash; and leave a lasting mark on how AI handles security at scale.
 
 
 <ul>
 <li>
 Organization: Alignerr
 </li>
 <li>
 Type: Hourly Contract
 </li>
 <li>
 Location: Remote
 </li>
 <li>
 Commitment: 10&ndash;40 hours/week
 
 
 </li>
 </ul>
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Analyze realistic SOC scenarios &mdash; alerts, incidents, and investigations &mdash; and document how you reason through them
 </li>
 <li>
 Classify severity levels, identify root causes, and recommend appropriate response actions
 </li>
 <li>
 Review and evaluate AI-generated detection logic and investigation workflows for accuracy and realism
 </li>
 <li>
 Validate AI outputs to ensure they reflect how experienced analysts actually think and operate
 </li>
 <li>
 Provide structured, expert feedback that directly improves AI behavior in security contexts
 
 
 </li>
 </ul>
 
 Who You Are
 
 
 
 <ul>
 <li>
 2+ years of experience in SOC, incident response, or security operations
 </li>
 <li>
 Hands-on familiarity with SIEM platforms, alert triage, and investigation workflows
 </li>
 <li>
 Strong ability to distinguish true threats from background noise and false positives
 </li>
 <li>
 Clear written communication skills &mdash; you can explain your reasoning, not just your conclusions
 </li>
 <li>
 Self-motivated and comfortable working independently on task-based assignments
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Experience with threat intelligence, detection engineering, or purple team exercises
 </li>
 <li>
 Familiarity with AI systems or previous AI evaluation work
 </li>
 <li>
 Background in writing detection rules, runbooks, or incident documentation
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Work on frontier AI projects alongside world-class research teams
 </li>
 <li>
 Fully remote and flexible &mdash; work on your own schedule
 </li>
 <li>
 Freelance perks: autonomy, variety, and global collaboration
 </li>
 <li>
 Make a real impact on how AI understands cybersecurity at a foundational level
 </li>
 <li>
 Potential for ongoing work and contract extension
 </li>
 </ul>
</div>

Security Operations Analyst

Walmart

<div><h2 class="jobSectionHeader">Position Summary...</h2><h2 class="jobSectionHeader">
What you'll do...</h2>
Role summary:
 
The Staff Intrusion Analyst serves as a technical and operational leader within Walmart&rsquo;s Security Operations Center (SOC), responsible for guiding a team of analysts and establishing repeatable, measurable processes across intrusion detection, incident response, and threat management. This role focuses on building sustainable, scalable operations, ensuring SOC processes function effectively. The Staff Analyst drives consistency, automation, and quality improvement while mentoring analysts and influencing adjacent teams such as detection engineering, Security Engineering, and infrastructure security teams.
 
About the team:
 
The Security Operations Center Intrusion Analyst team is dedicated to safeguarding the Walmart ecosystem by deploying industry best practices and automation to prevent intrusions and data loss. This team leverages advanced tools and frameworks to enhance threat detection and response capabilities, ensuring robust protection across the organization. Focused on continuous improvement, the team collaborates across functions to implement effective security measures that strengthen customer trust and maintain operational resilience in a dynamic cyber threat landscape.
 
What you'll do:
 
<ul><li>Process Ownership &amp; Repeatability &ndash; Define, document, and enhance SOC processes and workflow to ensure consistent, measurable, and auditable execution.</li><li>
Tooling and Automation Oversight &ndash; Drive automation and efficiency improvements using SOAR platforms and AI-based tools.</li><li>
Framework Alignment &ndash; Ensure SOC practices align with the NIST Incident Response Framework and MITRE ATT&amp;CK for consistent classification and reporting.</li><li>
Cross-Functional Collaboration &ndash; Partner with security, engineering, and risk teams to drive holistic incident management and continuous process improvement.</li><li>
Metrics &amp; Reporting &ndash; Define and manage metrics for SOC performance, response efficiency, and operational maturity.</li></ul> 
 
 
What you'll bring:
 
<ul><li>Proficient in security relevant data analysis and querying using tools such as SIEM, SOAR, EDR, etc.</li><li>
Experience leveraging SOAR platforms for workflow automation and response orchestration.</li><li>
Highly experienced with endpoint and forensic tools.</li><li>
Working knowledge of AI and automation platforms.</li><li>
Understanding of NIST Incident Response Framework, MITRE ATT&amp;CK.</li><li>
Strong analytical and communication skills for cross-functional collaboration.</li><li>
Experience in defining, measuring, and reporting on KPI's/Metrics.</li></ul>
At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
 
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
 
For information about benefits and eligibility, see One.Walmart.
 
Bentonville, Arkansas US-09050: The annual salary range for this position is $110,000.00 - $220,000.00
 
Herndon, Virginia US-10710: The annual salary range for this position is $132,000.00 - $264,000.00 Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include :
 
<ul><li>Stock</li></ul>
ㅤ
ㅤ
ㅤ
ㅤ
&lrm;<h2 class="jobSectionHeader">
Minimum Qualifications...</h2>
Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
Option 1: Bachelor&rsquo;s degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 4years&rsquo; experience in intrusion analysis or related area at a technology, retail, or data-driven company. 
 
Option 2: 6 years&rsquo; experience in intrusion analysis or related area at a technology, retail, or data-driven company.<h2 class="jobSectionHeader">
Preferred Qualifications...</h2>
Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.
Certification in Security+, Network+, GISF, CISA ,CISSP, CCSP, or GCIH, Master&rsquo;s degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 2 years&rsquo; experience leading information security or cybersecurity projects, We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart&rsquo;s accessibility standards and guidelines for supporting an inclusive culture.<h2 class="jobSectionHeader">
Primary Location...</h2>
805 Se Moberly Ln., Bentonville, AR 72712, United States of America
Walmart and its subsidiaries are committed to maintaining a drug-free workplace and has a no tolerance policy regarding the use of illegal drugs and alcohol on the job. This policy applies to all employees and aims to create a safe and productive work environment.</div>

(USA) Staff, Intrusion Analyst

Visual Soft, Inc

<div>Visual Soft, Inc is seeking qualified candidates to work on our efforts with a Prime for their end customer, a federal agency. 
 
Position: Senior SOC - Security/Resource Management Analyst - (US Citizenship is a MUST) - (4 days ONSITE and 1 day REMOTE at Present, however, it may go 100% ONSITE in the near future) 
Location: Washington, DC, next to Union Station metro 
Compensation: Based on certifications, education and experience, very competitive 
Various Shifts available. SHIFT TIMINGS: 
2nd - M-F 3PM-11:30PM 
<h2 class="jobSectionHeader">Candidates Willing to work in any Shift 2 or any other shifts are highly desired</h2>
JOB DESCRIPTION: 
The Senior SOC/Resource Management Analyst has the primary responsibility of aggressively monitoring and responding to alerts triggered in the SIEM tool or requests for assistance from customers. The Senior SOC/Resource Management Analyst will use a variety of tools to investigate incidents and take immediate action or recommend a course of action to safeguard the U.S. Courts systems. 
 
General Experience: 
****PRIOR or ONGOING experience (6 yrs+) of working in a SOC environment is a MUST.**** 
 
Please do 'not; apply if you do 'NOT' have above professional experience. 
 
Six (62)+ years of network intrusion detection experience. Contractor must have the following skills: The ability to investigate and evaluate network traffic, and the ability to read and interpret log and sniffer packets, Wireshark. The ability to analyze data from a variety of sources over time and create a logical narrative of observed behavior, and the ability to communicate clearly both orally and in writing. In this role, the candidate is also required to be in a lead role must be able to function as resource management analyst and mentor and manage a team of 3 SOC analysts. 
 
Specialized Experience:
 
Candidate will have at six (6)+ years experience performing intrusion detection analytics working with the examination of logs and console events in the following working experience areas of; Splunk, examining Snort based IDS events, PCAP, web server log review, and working in a SIEM environment. 
**SPLUNK SIEM advanced queries HANDS-ON experience highly desired. 
 
Years of Experience: 6+ years 
Education Requirement: BS degree preferred, industry certifications are desired such as Security+ or CySA+ or CEH or CISSP or GCIH and other industry recognized certs. SPLUNK certifications are highly desired but NOT required 
Clearance requirement: U.S. Citizenship is required. 
 
Standard Benefits: 
 Our standard benefits include: Our standard benefits include 3 weeks of Paid time off (PTO that includes sick leave). Any unused PTO will be issued as a check at the end of an employee's anniversary with us. we also provide 2 floating and 8 public holidays. Floating and holidays expire at the end of every year of service of an employee. In addition, company will cover 50% of health and dental insurances only for all full time employees, however, dependents can be added at extra cost. Employee's health and dental coverage becomes effective after 30 days or first of the month after an employee completes initial 30 working days, we cover 50% for the employee's health and dental insurances. Dependents coverage for health and dental insurances is available as an out of pocket expense for employees. An employee has to finish all of your paper work for health and dental in the first 30 days of your employment with us. We provide STD, LTD and one time salary equivalent of life insurance at NO cost to all full time employees. All full time employees or w-2 employees with no benefits will be eligible to participate in company's 401k program after 90 days of employment with a company match of 4%, immediate vesting. In addition, all w-2 employees are eligible to be part of company's profit sharing, no employee contributions required.</div>

Senior SOC Security - Resource Mgmt Analyst - US Citizenship - 100% ONSITE

The Clearing House

<div>
 
 Position Summary
 
 
 
 We are seeking a motivated Junior Analyst to support Security Operations Center (SOC) and Identity and Access Management (IAM) operational activities. This role is ideal for candidates looking to build foundational experience in cybersecurity, access governance, and incident response within a fast-paced environment.
 
 
 
 Qualifications Required
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree (or working toward) in Cybersecurity, Information Technology, Computer Science, or related field
 </li>
 <li>
 0&ndash;2 years of experience in IT, cybersecurity, or related internships
 </li>
 <li>
 Basic understanding of IAM concepts (user lifecycle, access controls, authentication)
 </li>
 <li>
 Familiarity with security principles and common threats
 </li>
 <li>
 Exposure to tools such as Active Directory, SIEM platforms, or ticketing systems is a plus
 </li>
 <li>
 Strong attention to detail and willingness to learn
 </li>
 <li>
 Good communication and documentation skills
 
 
 </li>
 </ul>
 
 Qualifications Desired
 
 
 
 <ul>
 <li>
 Knowledge of frameworks such as NIST, ISO 27001, or CIS Controls
 </li>
 <li>
 Familiarity with multi-factor authentication (MFA) and identity governance tools
 </li>
 <li>
 Basic scripting (PowerShell, Python) is a plus
 </li>
 <li>
 Relevant certifications (or working toward) such as Security+, Network+, or similar
 
 
 </li>
 </ul>
 
 SOC Support
 
 
 
 
 Essential Functions and Responsibilities:
 
 
 
 <ul>
 <li>
 Monitor security alerts and events using SIEM tools
 </li>
 <li>
 Triage and escalate potential security incidents
 </li>
 <li>
 Assist in basic incident response and investigation activities
 </li>
 <li>
 Document incidents, findings, and remediation steps
 </li>
 <li>
 Support vulnerability management and patch tracking efforts
 
 
 </li>
 </ul>
 
 IAM Operations Support
 
 
 
 <ul>
 <li>
 Assist with user account provisioning, deprovisioning, and access modifications across systems
 </li>
 <li>
 Support access reviews and certification processes
 </li>
 <li>
 Monitor and respond to IAM-related requests and tickets
 </li>
 <li>
 Help maintain role-based access controls (RBAC) and documentation
 </li>
 <li>
 Ensure compliance with security policies and access control standards
 
 
 </li>
 </ul>
 
 Physical demands and work environment:
 
 Work is generally sedentary in nature. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.
 
 
 Employees in this position will report to the office 3 days per week. Occasional travel may be required. Onsite work requirements may change at any time.
</div>

Junior Analyst, IAM Operations & Security Operations Center

NuHarbor Security

<div><h2 class="jobSectionHeader">The Company</h2>

Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We're growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission.
<h2 class="jobSectionHeader">
The Role</h2>

The Senior Security Analyst is a senior individual contributor within the NuHarbor Managed Services Security Operations team. This role serves as the technical anchor on shift, conducting deep investigations, producing client-ready documentation, and actively raising the quality of the team's work through mentorship and technical shift ownership. Senior Security Analysts are expected to operate with minimal direction, self-assign to the most complex open problems, and deliver work that reflects NuHarbor's commitment to technical excellence and client outcomes.

.

What you'll do
<ul>
<li>Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House.</li>
<li>Own investigations end-to-end from initial alert through root cause analysis, attack chain reconstruction, and client-ready written narrative.</li>
<li>Correlate across SIEM, EDR, and identity telemetry to identify what alerts missed, not just what they flagged.</li>
<li>Self-assign to difficult, ambiguous, or high-priority work without requiring direction, including work that falls outside defined lanes.</li>
<li>Support the Security Analyst team with alert triage, classification, disposition, and escalation within SLA requirements.</li>
<li>Identify and communicate security gaps and mitigations in the context of client environments.</li>
<li>Communicate proactively with the Security Operations Manager on active threats, escalations, and items requiring leadership visibility.</li>
<li>Facilitate client-facing meetings including incident briefings, escalation reviews, and threat landscape discussions.</li>
<li>Produce ticket documentation that requires no editorial cleanup, every ticket must include an evidence trail, analyst reasoning, disposition rationale, and a plain-language client summary</li>
<li>Remain current on emerging threats, CVEs, and attacker techniques relevant to client environments.</li>
<li>Support the onboarding of new clients onto NuHarbor Security Services and Platforms.</li>
<li>Train, mentor, and support junior analysts, including structured coaching on investigation methodology, documentation standards, and client communication.</li>
<li>Review escalations to clients from junior analysts prior to client delivery, ensuring investigative completeness and documentation quality.</li>
<li>Develop and refine automation playbooks to reduce alert volume and improve analyst workflow.</li>
<li>Contribute tuning feedback, noise identification, and alert fidelity assessments to the Detection Engineering program, in coordination with DE leadership.</li>
<li>Develop recommendations and enhancements to mature a client's cybersecurity program.</li>
<li>Coordinate with NuHarbor clients and internal stakeholders during and after incident response activities.</li>
</ul>
Your foundation. The requirements for this role:
<ul>
<li>Bachelor's Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications.
<ul><li>In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.</li>
</ul></li><li>Demonstrated experience with SOC operations, executing security event triaging and tuning.</li>
<li>Demonstrated experience writing runbooks and support procedures.</li>
<li>Demonstrated experience executing Monitoring and Response across multiple phases, containment, eradication, and recovery, in a SOC or MSSP environment.</li>
<li>Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset.</li>
<li>Hands on experience with at least two of the following Endpoint Detection and Response (EDR) and Security Orchestration Automation and Response solutions.
<ul><li>CrowdStrike</li>
<li>Microsoft Defender</li>
<li>Microsoft Sentinel</li>
<li>Splunk Enterprise Security</li>
</ul></li><li>Demonstrated experience with scripting in at least one language (Python, PowerShell, or equivalent) in a manner that supports automation solutions.</li>
<li>Excellent written and verbal communication skills.</li>
<li>Previous experience in technical support or security-focused role.</li>
<li>Willing and able to work Sunday - Thursday, 8:30am - 5:00pm.</li>
<li>Must be authorized to work within the United States.</li>
</ul>
Additional capabilities that will differentiate you for this role:
<ul>
<li>Bachelor's Degree and seven (7) or more years of experience in cybersecurity with progressive responsibility in SOC, MDR, or MSSP environment.</li>
<li>Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.)</li>
<li>Demonstrated experience communicating and presenting to executive level client stakeholders.</li>
<li>Technical writing and reporting experience.</li>
<li>Experience executing initial triaging and response through a SOAR platform.</li>
<li>Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file systems.</li>
<li>Experience with memory and storage forensics.</li>
<li>Experience with static and dynamic malware analysis.</li>
<li>Demonstrated ability to translate complex technical findings into clear, business-relevant narratives for non-technical audiences.</li>
<li>Experience with data science techniques (clustering, anomaly detection, data normalization, etc.</li>
<li>General systems administrator experience.</li>
<li>Fluency with the MITRE ATT&amp;CK framework as an active investigation and communication tool.</li>
<li>Experience working in multiple cybersecurity disciplines (i.e. Penetration Testing, Threat, Information Assurance, Engineering, etc.)</li>
</ul><h2 class="jobSectionHeader">The Rewards</h2>

What you can expect:
<ul>
<li>The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market.</li>
<li>An organization that recognizes and rewards employee commitment and contribution to our customers' satisfaction and success</li>
<li>Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption.</li>
<li>A collaborative and driven working environment in a rapidly growing company and market</li>
<li>A fun and social working environment where you are encouraged to be your true self.</li>
</ul>
You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO.

The salary for this role is targeted in the 110K - 135K, based on Burlington, VT salaries. Geographical location will be taken into consideration in salary offer.

We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win. If this sounds like the kind of organization you'd like to be a part of, we'd like to hear from you.

AAP/EEO Statement

The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled.

NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.</div>

Senior Security Operations Analyst

Search 726+ Soc analyst jobs near you this June. New roles added regularly across leading industries. Apply today.