soc analyst

Mercor

<div>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 <strong>
  Mercor
 </strong>
 connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include
 <strong>
  Benchmark
 </strong>
 ,
 <strong>
  General Catalyst
 </strong>
 ,
 <strong>
  Peter Thiel
 </strong>
 ,
 <strong>
  Adam D'Angelo
 </strong>
 ,
 <strong>
  Larry Summers
 </strong>
 , and
 <strong>
  Jack Dorsey
 </strong>
 .
 <br/>
 <br/>
 <strong>
  Position:
 </strong>
 SOC Investigation Specialist
 <br/>
 <br/>
 <strong>
  Type:
 </strong>
 <strong>
  Contract
  <br/>
  <br/>
 </strong>
 <strong>
  Compensation:
 </strong>
 <strong>
  $70&ndash;$95/hour
  <br/>
  <br/>
 </strong>
 <strong>
  Location:
 </strong>
 <strong>
  Remote
  <br/>
  <br/>
 </strong>
 <strong>
  Role Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Review, monitor, and evaluate SOC alerts and investigation outputs based on predefined scenarios and criteria.
  </li>
  <li>
   Distinguish true positives from false positives by validating investigative evidence and alert context.
  </li>
  <li>
   Perform end-to-end security investigations, including log analysis, entity pivoting, timeline reconstruction, and evidence correlation.
  </li>
  <li>
   Assess the correctness, completeness, and quality of SOC investigations produced by automated or human workflows.
  </li>
  <li>
   Use Splunk extensively to pivot across logs, entities, and timelines, including reading and reasoning about SPL queries.
  </li>
  <li>
   Collaborate with program leads and other expert annotators to uphold high-quality investigation and annotation standards.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Must-Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   3+ years of hands-on experience as a SOC analyst in a production SOC environment (Tier 2 or above strongly preferred).
  </li>
  <li>
   Strong understanding of alert triage, incident investigation workflows, and evidence-based decision-making under time constraints.
  </li>
  <li>
   Mandatory hands-on experience with Splunk, including conducting investigations and reasoning about SPL queries.
  </li>
  <li>
   Proven ability to evaluate SOC investigations and determine whether conclusions are valid, incomplete, or incorrect.
  </li>
  <li>
   Fluent English (written and spoken) with strong documentation and communication skills.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience with Endpoint Detection &amp; Response (EDR) tools such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or SentinelOne.
  </li>
  <li>
   Experience analyzing cloud security logs and signals: AWS (CloudTrail, GuardDuty), Azure (Activity Log, Defender for Cloud), GCP (Cloud Audit Logs).
  </li>
  <li>
   Familiarity with Identity &amp; Access Management platforms such as Okta Identity Cloud or Microsoft Entra ID (Azure AD).
  </li>
  <li>
   Experience with email security tools like Proofpoint or Mimecast.
  </li>
  <li>
   SOC leadership or mentoring experience.
  </li>
  <li>
   Basic scripting experience (Python or similar).
  </li>
  <li>
   Security certifications (optional): GCIA, GCIH, GCED, Splunk certifications, Security+, CCNA, or cloud security certifications.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Application Process (Takes 20&ndash;30 mins to complete)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Upload resume
  </li>
  <li>
   AI interview based on your resume
  </li>
  <li>
   Submit form
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Resources &amp; Support
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome/welcome
  </li>
  <li>
   For any help or support, reach out to: support@mercor.com
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <em>
  PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
 </em>
</div>


SOC Analyst

Techbridge Consultancy Services

<p><b>Job Location:</b> Gulberg, Lahore (On-Site)<br/><b>Experience Required:</b> 2&ndash;3 Years<br/><b>Salary:</b> Up to 110,000 PKR</p><p><b>Responsibilities:</b></p><p>Tech Bridge Consultancy seeks experience in security monitoring solutions, incident response and other cybersecurity tools and technologies implementation capabilities. In your role, your duties will include the following:</p><ul><li>SOC monitoring coverage for any of the following shifts: <b>EST Time 8:00am &ndash; 4:00pm (PST 5:00pm &ndash; 1:00am), 4:00pm &ndash; 12:00am (PST 1:00am &ndash; 9:00am), 12:00am &ndash; 8:00am (PST 9:00am &ndash; 5:00pm)</b>; the work week is considered a minimum of 40 hours each week. Day to day security logging and monitoring solutions; identifying false positives and detecting potential or real threats</li><li>In-depth analysis of security events, alerts and incidents</li><li>Promptly responding to customer enquiries via emails and/or phone calls; responding to security incidents and threats</li><li>Analyzing logs, network traffic and data to identify potential threats and vulnerabilities</li><li>Development security dashboards and reporting; compile threat intelligence reports and manage log data</li><li>Configuration of security tools and technologies (e.g. SIEM, EDR, VM, etc.)</li><li>Configuration of network and security appliances (e.g. Firewalls, routers, switches, HIDS, NIDS, etc.)</li><li>Endpoint security configuration (Defender, CrowdStrike, SentinelOne, Webroot, Kaspersky, etc.)</li><li>Firewall rules configuration and optimization</li><li>SIEM rules configuration (Sentinel, Splunk, LogRhythm, etc.)</li><li>Technical writing and security policy development</li><li>Staying current on industry trends, keeping up-to-date with relevant CVE&rsquo;s and the evolving threat landscape</li><li>Conducting vulnerability scans of network and applications</li><li>Keeping company systems up-to-date with current security patches</li><li>Recommending security improvements to line managers or senior management</li></ul><p><b>Requirements:</b></p><ul><li>Strong understanding of cybersecurity principles and the SOC environment</li><li>Bachelor&rsquo;s degree in cyber security, computer sciences or equivalent</li><li>Good understanding of vulnerability management tools and techniques</li><li>Good understanding of Windows, Linux and macOS operating systems and endpoints</li><li>Knowledge of modern problem-solving skills, and keen attention to detail</li><li>Good understanding of the modern security in SDLC practices</li><li>Capable of Balancing multiple priorities and remaining flexible in a changing environment</li><li>Good communication and interpersonal skills</li><li>Familiarity with regulatory compliance and security standards (ISO27001, SOC 2 TYPE 1 and TYPE 2, NERC CIP, IE 62443, NIST CSF, etc.)</li></ul><p><b>Other duties may include:</b></p><p>&middot; Contribute to the preparation of technical documentation, including proposals, tenders, RFPs (Requests for Proposals), and RFIs (Requests for Information)</p><p>&middot; Participate in business development activities directly related to the sale of cybersecurity services and other tasks supporting the delivery of cybersecurity products and services</p><p>&middot; Personnel are required to work on-site; remote or hybrid work options will not be available</p><p>&middot; Personnel must strictly use company-provided computer assets, hardware, and licensed software to perform all assigned services</p><p>&middot; Personnel must not work more than 12 consecutive hours per shift</p><p>&middot; Personnel are required to adhere to internal cybersecurity and IT policies and standards</p><p>&middot; Personnel are required to strictly uphold confidentiality and integrity clauses while dealing with all customer data</p><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>Are you comfortable working onsite in any of the following SOC shift timings?</li><li>Are you comfortable with an on-site role, as this position is not remote or hybrid?</li><li>Are you familiar with any security compliance standards like ISO 27001, SOC 2, or NIST?</li><li>Are you fluent in English, both written and spoken?</li><li>Are you from Lahore? (Yes/No)</li></ul><p>Work Location: In person</p>

IPSECURE, INC.

<div><div><b>DOD SkillBridge Program</b></div>
<div>Any rank, enlisted or officer, may apply for this SkillBridge opportunity. <b>Only Applicants who are active military service members will be considered for this opportunity.</b> Can be up to 180 days of Service to train.</div>
<div></div><div><b>SOC Analyst - Located at Port San Antonio, SATX - TS/SCI Level Clearance Preferred</b></div>
<div></div><div><div><b>Title:</b> SOC Analyst</div>
<div><b>Location: </b>919 Billy Mitchell Blvd Suite 107, San Antonio, Texas</div>
<div><b>Schedule: </b>8am &ndash; 4pm Monday &ndash; Friday (40 hours per week)</div>
<div></div><div><b>In this internship with IPSecure, you will:</b></div>
<div></div><ul><li> Learn how your military experience translates into a rewarding civilian career.</li></ul>
<ul><li> Explore a career or industry you might want to pursue upon separation from active duty.</li></ul>
<ul><li> Build experience and competency in your trade/ profession with our team.</li></ul>
<ul><li> Expand your professional network of contacts.</li></ul>
<ul><li> Gain familiarity with corporate culture.</li></ul><br>
<div></div>
<div></div><div><div><div><div><div><div><b>Internship Schedule/Hours</b></div>
</div><div><div><b>Responsibility of Employer</b></div>
</div><div><div><b>Responsibility of Intern</b></div><br>
</div></div><br>
<div></div><div><div><div>Week 1</div>
<div><i>40 hours</i></div>
</div><div><div>Complete Onboarding
</div><div>Create user accounts</div>
</div><div><div>Complete Onboarding
</div><div>Ensure you can login to all toolsets</div><br>
</div></div><br>
<div></div><div><div><div>Week 2</div>
<div><i>40 hours</i></div>
</div><div><div>Walk thru toolsets and review SOC documentation
</div><div>Work with IPSecure SOC team to familiarize yourself with SOC tools and processes</div>
</div><div><div>Collaborate with analyst, individually, to observe their day-to-day operations</div><br>
</div></div><br>
<div></div><div><div><div>Week 3</div>
<div><i>40 hours</i></div>
</div><div><div>Gain familiarity with toolsets</div>
</div><div><div>Work with analysts
</div><div>Use SOC documentation to help navigate thru toolsets</div><br>
</div></div><br>
<div></div><div><div><div>Week 4</div>
<div><i>40 hours</i></div>
</div><div><div>Phishing emails
</div><div>Conduct vulnerability scans</div>
</div><div><div>Work with analyst to conduct vulnerability scans</div><br>
</div></div><br>
<div></div><div><div><div>Month 2</div>
<div><i>160 hours</i></div>
</div><div><div>Threat Hunting</div>
<div>Create Suppression/Filtering Rules</div>
</div><div><div>Work with analysts
</div><div>Review SOC documentation</div><br>
</div></div><br>
<div></div><div><div><div>Month 3</div>
<div><i>160 hours</i></div>
</div><div><div>Create/Review resume</div>
</div><div><div>Have draft of resume if possible</div><br>
</div></div><br>
<div></div><div><div><div>Month 4</div>
<div><i>160 hours</i></div>
</div><div><div>Threat Hunting</div>
</div><div><div>OJT/CERT PREP</div><br>
</div></div><br>
<div><div><div>Month 5</div>
<div><i>160 hours</i></div>
</div><div><div>Threat Hunting</div>
</div><div><div>OJT/CERT PREP</div><br>
</div></div><br>
<div></div><div><div><div>Month 6</div>
<div><i>160 hours</i></div>
</div><div><div>Threat Hunting</div>
<div>Final Resume</div>
</div><div><div>OJT/CERT PREP</div>
</div></div><br>
</div></div><div></div><div><b>Supervisory Responsibilities</b></div>
<ul><li>This position has no supervisory responsibilities</li>
</ul><div><b>Reporting Relationship</b></div>
<ul><li>Will report to assigned supervisor</li>
</ul><div><b>Qualifications</b></div>
<ul><li>Must be an active military service member</li>
<li>Must reside locally in the San Antonio, Texas metro area</li>
</ul><div><b>Preferred Qualifications</b></div>
<ul><li>Military experience with the Air Force cyber mission force (CMF)</li>
<li>TS/SCI Clearance</li>
<li>DOD 8570 IAT Level II, such as CCNA, CySA+, GICSP, GSEC, Security+, CND or SSCP</li>
</ul><div><div><b>EEOC Statement</b></div>
<div>IPSecure does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, disability or status as a protected veteran.</div></div></div></div></div>

SkillBridge SOC Analyst

Al Adyat consultancy

<p><b>Job Summary:</b><br/>The SOC Analyst Level 1 is responsible for monitoring, detecting, and responding to security events and incidents within the organization. The role involves analyzing alerts from various security tools, escalating incidents when necessary, and maintaining documentation of security activities. This is an entry-level position for candidates looking to start a career in cybersecurity.</p><p><b>Key Responsibilities:</b></p><ul><li>Monitor security alerts and events from SIEM (Security Information and Event Management) and other security tools.</li><li>Perform initial triage and analysis of security incidents.</li><li>Escalate confirmed incidents to Level 2 or appropriate teams.</li><li>Maintain accurate incident documentation and logs.</li><li>Assist in vulnerability management and routine security checks.</li><li>Follow standard operating procedures (SOPs) for incident response.</li><li>Stay updated on the latest cybersecurity threats and trends.</li></ul><p><b>Qualifications:</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, or a related field.</li><li>Basic understanding of networking, firewalls, intrusion detection/prevention systems, and endpoint security.</li><li>Familiarity with SIEM tools such as Splunk, QRadar, or ArcSight is a plus.</li><li>Strong analytical and problem-solving skills.</li><li>Good communication skills, both written and verbal.</li><li>Willingness to work in shifts (if SOC operates 24/7).</li></ul><p><b>Preferred Certifications (Optional):</b></p><ul><li>CompTIA Security+</li><li>Cisco CCNA Security</li><li>EC-Council CEH (Certified Ethical Hacker)</li></ul><p><b>Working Conditions:</b></p><ul><li>Shift-based work depending on SOC operational hours.</li><li>Fast-paced environment requiring attention to detail and quick response to incidents.</li></ul><p><b>Career Path:</b><br/>Successful SOC Analyst L1 can progress to SOC Analyst L2, then to SOC Analyst L3, Threat Hunter, or Incident Response Specialist roles.</p><p>Job Type: Full-time</p><p>Pay: QAR10,000.00 - QAR13,000.00 per month</p><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>SOC Analyst Level 1 (L1): 3 years (Required)</li></ul><p>Language:</p><ul><li>Arabic (Required)</li><li>English (Required)</li></ul><p>License/Certification:</p><ul><li>degree in Computer Science, Information Technology (Required)</li></ul><p>Location:</p><ul><li>Doha (Required)</li></ul>

SOC Analyst Level 1 (L1)

YO IT CONSULTING

<div><div><div><p><b>Work Mode:</b> Remote<br>
<b>Engagement Type:</b> Independent Contractor<br>
<b>Schedule:</b> Full-Time or Part-Time Contract</p>
<p><b>Language Requirement:</b> Fluent English</p>
<p>Recruiting on behalf of a cutting-edge AI research lab building advanced AI systems for cybersecurity applications. We are seeking senior cybersecurity professionals with deep hands-on experience across both <b>defensive (Blue Team)</b> and <b>offensive (Red Team)</b> security disciplines. In this role, you will apply real-world adversarial and defensive expertise to evaluate, stress-test, and improve AI models designed to assist with threat detection, incident response, and attack simulation. Your insights will directly inform how AI systems reason about attacks, evasions, detection logic, and response workflows. This is a flexible, remote engagement ideal for experienced practitioners who have operated in enterprise, consulting, or high-security environments.</p>
<p></p><h2 class="jobSectionHeader"><b>Key Responsibilities</b></h2>
<h2 class="jobSectionHeader"><b>Defensive (Blue Team) Contributions</b></h2>
<ul><li><p>Investigate and analyse real or simulated security incidents (e.g., phishing, lateral movement, ransomware, privilege escalation).</p>
</li><li><p>Review logs and telemetry from SIEM, EDR/XDR, firewall, cloud, and identity systems.</p>
</li><li><p>Apply frameworks such as <b>MITRE ATTACK</b> to classify adversary behavior.</p>
</li><li><p>Evaluate alert quality, detection rules, triage decisions, and response workflows.</p>
</li><li><p>Assess AI-generated investigations for technical correctness and operational realism.</p>
</li></ul><h2 class="jobSectionHeader"><b>Offensive (Red Team) Contributions</b></h2>
<ul><li><p>Analyse attack chains including initial access, persistence, privilege escalation, lateral movement, and data exfiltration.</p>
</li><li><p>Simulate adversarial thinking to evaluate detection gaps and bypass techniques.</p>
</li><li><p>Review exploit techniques, payload behaviors, and evasion strategies.</p>
</li><li><p>Provide insights into attack surface analysis and real-world adversary tactics.</p>
</li><li><p>Stress-test AI systems against realistic red-team scenarios.</p>
</li></ul><h2 class="jobSectionHeader"><b>AI Evaluation &amp; Feedback</b></h2>
<ul><li><p>Provide structured reasoning explaining investigative and adversarial decisions.</p>
</li><li><p>Identify weaknesses in AI threat analysis and suggest improvements.</p>
</li><li><p>Help refine benchmarks for detection, triage, and attack simulation accuracy.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Requirements</b></h2>
<h2 class="jobSectionHeader"><b>Experience</b></h2>
<ul><li><p>5+ years in cybersecurity with experience in one or more of:</p>
<ul><li><p>SOC Analyst (Level II/III)</p>
</li><li><p>Incident Responder</p>
</li><li><p>Detection Engineer</p>
</li><li><p>Threat Hunter</p>
</li><li><p>Red Team Operator / Penetration Tester</p>
</li><li><p>Security Consultant (Offensive Security)</p>
</li></ul></li><li><p>Hands-on experience conducting or responding to real-world security incidents.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Technical Skills &ndash; Blue Team</b></h2>
<ul><li><p>Strong experience with:</p>
<ul><li><p>SIEM platforms (Splunk, Sentinel, QRadar, Elastic)</p>
</li><li><p>EDR/XDR tools (CrowdStrike, Defender, Carbon Black)</p>
</li><li><p>Log analysis and event correlation</p>
</li><li><p>Network traffic analysis (Wireshark, Zeek, tcpdump)</p>
</li></ul></li><li><p>Cloud security and IAM investigation experience preferred.</p>
</li><li><p>Familiarity with MITRE ATT&amp;CK mapping and detection engineering.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Technical Skills &ndash; Red Team</b></h2>
<ul><li><p>Experience with:</p>
<ul><li><p>Penetration testing methodologies</p>
</li><li><p>Adversary emulation and attack simulation</p>
</li><li><p>Exploitation frameworks (e.g., Metasploit, Cobalt Strike or equivalents)</p>
</li><li><p>Privilege escalation techniques</p>
</li><li><p>Lateral movement techniques</p>
</li><li><p>Evasion and obfuscation methods</p>
</li></ul></li><li><p>Understanding of Active Directory attacks, phishing frameworks, and payload development is a plus.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Analytical &amp; Communication Skills</b></h2>
<ul><li><p>Strong written documentation skills explaining technical reasoning.</p>
</li><li><p>Ability to think from both attacker and defender perspectives.</p>
</li><li><p>Structured, logical analysis of complex security scenarios.</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Preferred Qualifications</b></h2>
<ul><li><p>Certifications such as:</p>
<ul><li><p>OSCP, OSEP, CRTO (Red Team)</p>
</li><li><p>GCIA, GCFA, GCIH (Blue Team)</p>
</li><li><p>CISSP</p>
</li></ul></li><li><p>Experience mentoring junior analysts or red team members.</p>
</li><li><p>Scripting proficiency (Python, PowerShell, Bash).</p>
</li></ul><p></p><h2 class="jobSectionHeader"><b>Why Join</b></h2>
<ul><li><p>Contribute to next-generation AI systems for cybersecurity.</p>
</li><li><p>Work at the intersection of offensive and defensive security research.</p>
</li><li><p>High-impact role shaping AI reasoning about real-world cyber threats.</p>
</li><li><p>Flexible engagement suited for senior practitioners.</p>
</li><li><p>Collaborate with leading AI researchers and security experts.</p>
</li></ul><p>We consider all qualified applicants without regard to legally protected characteristics and provide reasonable accommodations upon request.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>Contract and Payment Terms</b></h2>
<ul><li>You will be engaged as an independent contractor.</li>
<li>This is a fully remote role that can be completed on your own schedule.</li>
<li>Projects can be extended, shortened, or concluded early depending on needs and performance.</li>
<li>Payments are weekly on Stripe or Wise based on services rendered.</li></ul></div></div></div>

SOC Analyst - Remote

Search 3680+ Soc analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

3680 soc analyst jobs Near Me

SOC Analyst

SOC Analyst

SkillBridge SOC Analyst

SOC Analyst Level 1 (L1)

SOC Analyst - Remote

SOC Analyst - Remote

SOC Analyst - Remote