Security Analyst II (SOC)

Description

We are looking for a Security Analyst II (SOC) to join a security operations team in Los Angeles, California as part of a Long-term Contract engagement. This role focuses on monitoring security activity, investigating alerts, and helping drive incident response efforts in a fast-paced environment. The ideal candidate brings hands-on experience in security operations, sound investigative judgment, and the ability to work closely with technical teams to strengthen detection and response capabilities.

Responsibilities:
Evaluate a high daily volume of security alerts and determine whether events represent genuine threats, routine activity, or inaccurate detections.
Triage security events, prioritize risk, and escalate advanced or high-impact issues to Security Engineers when deeper analysis is required.
Contribute to incident response activities from initial identification through containment, documentation, and follow-up review.
Refine and enhance detection logic to improve visibility, strengthen coverage, and reduce unnecessary alert noise.
Investigate suspicious behavior related to data loss, insider risk, and other security concerns surfaced through monitoring tools.
Apply threat intelligence by reviewing indicators of compromise and conducting targeted searches across available telemetry sources.
Collaborate with IT, platform, and engineering partners to remediate vulnerabilities and address gaps identified during investigations.
Support hybrid team operations with onsite participation Tuesday through Thursday as needed.

Requirements

2-4+ years of experience in security analysis, security operations, or detection and response functions.
Background working in a Level 1 or Level 2 SOC environment with hands-on alert triage and investigation responsibilities.
Understanding of networking concepts, security event logs, SIEM workflows, and incident response practices.
Ability to analyze activity patterns and distinguish legitimate business behavior from potentially malicious actions.
Strong analytical mindset, investigative problem-solving skills, and a proactive approach to technical learning.
Experience with cybersecurity tools and concepts such as DLP, Okta, SIEM platforms, application security, and cyber security policies.
Familiarity with tools or platforms such as SentinelOne, CrowdStrike, AWS Security Hub, or similar security technologies is preferred.
Relevant security knowledge supported by certifications such as CompTIA Security+ or equivalent practical experience is a plus.

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

Robert Half will consider for employment qualified applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.