Security Analyst Tier 2 SOC

TGI MAIN COMPANY•West Caldwell, NJ

1d•$80,000 - $90,000•Onsite

About The Position

The Tier 2 SOC Analyst plays a critical role in defending clients from cyber threats through proactive monitoring, incident response, and threat analysis. This Tier 2 position is responsible for investigating escalated alerts, mentoring Tier 1 analysts, tuning security platforms, and enhancing the organization’s overall security posture. It is ideal for professionals with hands-on experience in a security operations environment who are ready to take on a leadership and investigative role.

Requirements

Bachelor’s Degree in Cybersecurity, Information Security, or related field.
2–4 years of experience in SOC or cybersecurity operations.
Hands-on experience with SIEM, XDR, or endpoint protection platforms.
Knowledge of NIST, ISO 27001, and CIS security frameworks.
Strong analytical and investigative thinking.
Ability to clearly document and communicate findings.
Collaborative mindset with a willingness to share knowledge.

Nice To Haves

CompTIA Security+, CySA+ (preferred)
GIAC (GCIA, GCIH), CEH, or other vendor-neutral certifications
MSP experience

Responsibilities

Investigate security incidents escalated from Tier 1 SOC Analysts.
Conduct root cause analysis on recurring or advanced threats.
Identify and respond to phishing, malware, unauthorized access, and insider threats.
Assist with incident containment, remediation, and reporting.
Tune SIEM and XDR tools for better detection accuracy and reduced false positives.
Recommend and implement enhancements to detection rules and playbooks.
Work closely with engineering and NOC to ensure security alerts are actionable and prioritized.
Perform proactive threat hunting across client environments.
Analyze logs and network traffic for indicators of compromise (IOCs).
Maintain awareness of emerging threats and recommend mitigations.
Guide and mentor Tier 1 SOC Analysts on investigation techniques and tools.
Participate in internal tabletop exercises and training sessions.
Contributes to the development and maintenance of incident response runbooks.