SOC analyst

Role: SOC Engineer

Location: Remote

Duration:12+months

Interview: Video

Shifts available:

•             3rd Shift 12am-9am CST

Saturday- Wednesday

•             3rd shift 12am-9am CST

Wednesday-Sunday

•             Monday-Friday

12am-9am CST

•             1st shift 7am-3pm CST

Mon-Fri

Remote

Position Responsibilities:

As a Senior SOC Analyst, you will play a critical role in strengthening security operations and enhancing proactive cyber defense. The ideal candidate will focus on eliminating workflow inefficiencies, expanding threat detection, and driving operational excellence within the Security Operations Center (SOC). This role requires hands-on analysis, a keen eye for continuous improvement, and collaboration across InfoSec teams to elevate our detection, response, and threat-informed defense capabilities.

Key responsibilities include:

•             Identifying and resolving operational and workflow inefficiencies that impact response effectiveness or create friction for SOC analysts.

•             Expanding detection gap coverage through new use cases, improved telemetry, and refined detection logic to increase threat visibility.

•             Reducing false positives and increasing detection fidelity through tuning and ongoing optimization of tools and monitoring platforms.

•             Collaborating with InfoSec and platform teams to enhance monitoring platforms and tune controls.

•             Driving targeted threat hunts to proactively uncover risk, enable actionable detections, and strengthen the organization’s overall security posture.

Threat-Informed Defense & Detection Engineering:

•             Utilize internal and external threat intelligence, risk insights, and adversary research to guide defensive actions and detection strategies.

•             Develop, tune, and optimize SIEM/SOAR, EDR, NDR, and log analytics solutions to enhance alerting quality and reduce unnecessary noise.

•             Engineer, test, and deploy new detection logic, alerting mechanisms, analytics, and MITRE ATT&CK-aligned use cases to address sophisticated threat scenarios.

•             Identify preventive and detective control gaps, collaborating with stakeholders to implement enhancements that close exposure.

SOC Operations Maturity & Operational Excellence:

•             Partner with leadership to refine SOC responsibilities, define skill requirements, and help establish operational targets and metrics.

•             Continuously seek opportunities to streamline execution, automate repetitive tasks, and remove process friction points for analysts.

•             Translate observed detection gaps into measurable improvements using new detections, processes, or automation.

Threat Hunting:

•             Conduct hypothesis and intelligence-driven threat hunts to identify malicious activity, suspicious behavior, or weaknesses not directly observable via automated monitoring.

•             Document hunt findings and collaborate with leadership and stakeholders on remediation and strategic follow-up actions.

•             Evolve hunting methodologies and techniques in tandem with the evolving threat landscape, leveraging new tools or automations as appropriate.

Incident Response & Security Event Handling:

•             Participate in the management, escalation, and resolution of security events and incidents across the organization.

•             Independently and collaboratively identify, assess, report, and drive recovery from security incidents.

Be available for after-hours response when critical incidents arise, supporting business continuity and SOC objectives