SOC Analyst

Williams International • Pontiac, MI

9h

About The Position

Williams International is seeking a SOC Analyst to serve as a front-line defense against cyber threats. The analyst will monitor the enterprise environment using security tools, analyze real-time alerts, and conduct initial triage to determine severity. The role focuses on identifying and documenting potential incidents and ensuring they are promptly escalated or mitigated to protect company infrastructure.

The position works with security information and event management (SIEM) consoles, endpoint detection and response (EDR) platforms, network dashboards, logs from on-premises and cloud environments, and a designated ticketing system. It also involves investigating suspected employee phishing reports. U.S. citizenship is required, and the role may require the ability to obtain a U.S. Government Security Clearance if needed.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology, or equivalent hands-on experience.
• At least 1 year of hands-on experience navigating and querying SIEM platforms and EDR/XDR agents.
• Solid understanding of the OSI model, TCP/IP networking, common protocols such as DNS, HTTP, SMTP, and SSH, and basic network routing and switching.
• Proficiency navigating and reviewing logs in Windows Active Directory and Linux environments.
• Basic knowledge of cyberattack methodologies, including the MITRE ATT&CK framework or the Cyber Kill Chain.
• U.S. citizenship is required.
• Ability to obtain a U.S. Government Security Clearance if needed; selected candidates may be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Nice To Haves

• CompTIA Security+, CompTIA CySA+, GIAC Security Essentials (GSEC), or Cisco Certified CyberOps Associate certification.
• Basic ability to read or modify Python, PowerShell, or Bash scripts to help automate repetitive workflows.
• Active participation in hands-on learning platforms such as TryHackMe, Hack The Box, or Blue Team Labs Online.

Responsibilities

• Continuously monitor SIEM consoles, EDR platforms, and network dashboards for potential security incidents.
• Analyze high-volume alerts, filter false positives, and categorize genuine security events.
• Escalate validated threats to Tier 2/3 analysts or incident responders with clear, comprehensive technical documentation.
• Review and interpret logs from firewalls, intrusion detection and prevention systems, Active Directory, endpoints, and AWS or Azure cloud environments.
• Investigate suspected employee phishing reports by analyzing email headers, attachments, and embedded URLs in a secure sandbox.
• Document investigative steps, findings, and remediation actions in the designated ticketing system, such as Jira or ServiceNow.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level