Immediate need for a talented SOC Analyst Mid. This is a 06+ Months Contract opportunity with long-term potential and is located in Irving, TX (Onsite). Please review the job description below and contact me ASAP if you are interested.
Job ID:26-34543
Pay Range: $40 - $50/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).
Key Responsibilities:
- Investigate escalated alerts and incidents, validating triage decisions and taking ownership of escalated alerts.
- Perform in-depth investigations across endpoint, network, identity, email, and cloud telemetry to determine root cause, scope, and impact.
- Lead containment, eradication, and recovery for medium- and high-severity incidents, coordinating with IT teams to execute remediation actions.
- Develop new detection rules and correlation searches, tuning detections based on alert metrics and historical data.
- Mentor Level 1 analysts, providing feedback on investigation practices and contributing to the creation of SOPs and playbooks.
- Participate in the on-call rotation and contribute to tabletop exercises and drills.
Key Requirements and Technology Experience:
- 3-5 years of experience in security operations, incident response, or a related cybersecurity role, including at least 2 years as a SOC analyst.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent experience.
- Hands-on experience with SIEM and EDR platforms, including writing search queries (e.g., SPL).
- Solid understanding of Windows and Linux operating systems, Active Directory, and common log sources.
- Working knowledge of networking protocols (TCP/IP, DNS, HTTP/S, SMTP) with the ability to analyze network traffic.
- Practical experience applying MITRE ATT&CK to investigations and detection development.
- Strong written communication skills for incident reports and playbooks.
- Willingness to work shift-based coverage and participate in on-call rotation.
- Experience with scripting or automation tools such as PowerShell, Python, or XQL for Cyber defense operations
- Industry certifications such as CompTIA CySA, GIAC GCIH, GIAC GCIA.
- Experience building or maintaining SOAR playbooks, preferably in Cortex XSOAR.
- Experience monitoring cloud and SaaS environments (e.g., AWS, Azure, Microsoft 365).
- Experience working in retail, payments, or PCI DSS-regulated environments.
Our client is a leading Retail Industry and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.
Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy .
