SOC Analyst

Mercury Insurance Services, LLC

8d • Remote

About The Position

Join an amazing team that is consistently recognized for our achievements and culture, including our most recent Forbes award of being one of America's Best Midsize Employers for 2025!
Position Summary:
The primary job function of the Security Operations Center (SOC) Analyst is to identify, investigate, and escalate alerts and events to safeguard sensitive information from unauthorized access or breaches in a 24x7x365, operations-focused environment. Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions. Must be ethical, curious, and detail oriented.
Will also be responsible for following established security process roadmaps and knowledge articles (KB), supporting change validation where needed, resolving user/system security incidents, minimizing risk and exposure to the company’s infrastructure, and actively participating in disaster recovery and business continuity (BCP) events. Some scripting, coding and/or technical certificates may be needed to achieve certain job functions, so willingness to expand technical attributes will be expected.

Requirements

• BS degree in Computer Science, Information Technology, related field; and/or equivalent combination of education or work experience
• 1- 3 years of IT Security related experience and technologies
• Enterprise Security Operations support experience
• Enterprise security document creation.
• Understanding of IT infrastructure and networking: This includes knowledge of operating systems, network protocols, and basic infrastructure components.
• Security principles and technologies: Familiarity with common security threats, vulnerabilities, and mitigation strategies like firewalls, intrusion detection/prevention systems (IDS/IPS), and SIEM tools.
• Familiarity with basic scripting (e.g., PowerShell, Python) to automate recurring tasks and generate reports is a plus.
• Incident response procedures: Understanding of established processes for handling security incidents, including containment, eradication, and recovery.
• Security tools and software: Proficiency in using the specific security tools and software typically employed by a security organization.
• Communication: Clear and concise communication with technical and non-technical audiences, including reporting incidents to management and collaborating with other IT teams (including public speaking, critical business writing skills, process documentation and knowledge base article composure)
• Critical thinking and problem-solving: Ability to analyze complex security data, identify root causes of incidents, and develop effective solutions.
• Attention to detail: Meticulous focus on identifying subtle anomalies and potential threats within vast amounts of data.
• Decision-making under pressure: Making quick and informed decisions during critical security incidents.
• Ability to work collaboratively in a team-based SOC environment and coordinate with other IT and security teams.
• ServiceNow
• SIEM Solutions
• TrustWave
• Email Protection Solutions
• Endpoint Detection & Response Solutions
• Microsoft 365 Security Suite
• Incident Management Communication tools
• CV/CIRT Gov’t notification process
• Load balancers & Web Application Firewall Solutions
• Firewall/router/networking equipment
• Web Content Filtering (WSS)
• Secure Web Gateway Solutions
• ITIL Foundations certifications (V3 or V4)

Nice To Haves

• ~ 2+ years in a 24x7x365 Security Operations Center (SOC) or Network Operations Center (NOC)
• GIAC Security Essentials Certification
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• CompTIA CySA+
• Willingness to work off-hours/rotating shifts.
• 2 or more years of 24x7x365 Security Operations and related technologies

Responsibilities

• Monitoring and Triage security alerts, logs, and systems to identify potential threats and filter out false positives.
• Conduct preliminary investigations into alerts, gather contextual data, and analyze events to understand if a real security incident is occurring.
• Escalate confirmed security incidents and complex alerts to higher-level engineers or other teams, providing clear summaries, evidence, and recommended next steps.
• Document all findings, actions taken, and evidence gathered in accordance with SOC documentation standards.
• Follow established standard operating procedures (SOPs) to respond to common security events and collect preliminary evidence.
• Stay current on the latest cyber threats, vulnerabilities, and attack techniques to better recognize and respond to potential issues.
• Assist with security audits and help ensure the organization meets compliance requirements.
• Minimize risk and exposure to system security and business interruptions of the company's infrastructure.
• Participate in disaster recovery and BCP events: Actively participate in disaster recovery and Business Continuity Plan (BCP) events.

Benefits

• Competitive compensation
• Flexibility to work from anywhere in the United States for most positions
• Paid time off (vacation time, sick time, 9 paid Company holidays, volunteer hours)
• Incentive bonus programs (potential for holiday bonus, referral bonus, and performance-based bonus)
• Medical, dental, vision, life, and pet insurance
• 401 (k) retirement savings plan with company match
• Engaging work environment
• Promotional opportunities
• Education assistance
• Professional and personal development opportunities
• Company recognition program
• Health and wellbeing resources, including free mental wellbeing therapy/coaching sessions, child and eldercare resources, and more

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level