Senior SOC Analyst - Only W2 candidate.

We are seeking an experienced Senior SOC Analyst to support a large-scale Security Operations Center (SOC) environment. The ideal candidate will have hands-on experience in security monitoring, incident response, threat detection, and security investigations while collaborating with engineering and operations teams to strengthen organizational cybersecurity posture. Preference will be given to candidates who can support onsite project needs when required.

• Monitor and analyze security events across SIEM, EDR, IDS/IPS, and threat intelligence platforms.
• Investigate security incidents, determine root cause, assess impact, and escalate critical threats as needed.
• Develop incident reports, timelines, post-incident reviews, and remediation recommendations.
• Investigate phishing attempts, malware infections, and policy violations.
• Enhance SOC playbooks, detection rules, alert thresholds, and correlation logic.
• Conduct proactive threat hunting using current tactics, techniques, and procedures (TTPs).
• Collaborate with security engineering and operational teams to optimize monitoring solutions.
• Serve as a customer-facing security subject matter expert.
• Maintain SOC documentation, runbooks, and operational procedures.
• Support additional cybersecurity and security operations initiatives as required.

• Must have 10 years of experience from the Security Background.
• 2+ years of experience in Security Monitoring and Incident Response.
• 2+ years of experience working with the MITRE ATT&CK Framework.
• 2+ years of experience creating dashboards and security reports.

• Experience with Palo Alto Cortex XSIAM/XDR.
• Knowledge of Linux, network administration, and network design.
• Experience with firewalls, VPN technologies, Active Directory, and IDS/IPS solutions.
• SOC operations experience in large enterprise environments.

Required:

• Associate degree in Information Technology, Information Security, or related field.
• Four years of relevant work experience may be substituted for education.
• Two years of experience supporting large SOC operations.