SOC Analyst

INFO ORIGIN INC• US, PA

2d•$25 - $30•Onsite

About The Position

We are looking for an experienced SOC Analyst 2 to join our Security Operations Center (SOC) team in Harrisburg, PA. The ideal candidate will have strong experience in security monitoring, incident investigation, SIEM, threat hunting, detection engineering, and incident response. You will be responsible for monitoring security events, investigating alerts, identifying indicators of compromise, improving detection rules, and supporting incident response activities to protect critical IT systems and networks.

Requirements

Experience working in a Security Operations Center (SOC) environment.
Strong knowledge of SIEM, security monitoring, and alert triage.
Experience with threat hunting and incident investigation.
Ability to analyze security logs, network traffic/captures, and endpoint telemetry.
Knowledge of IOCs, malicious activity, and common security threats.
Experience tuning detection rules and reducing false positives.
Strong troubleshooting and analytical skills.
Ability to create queries, reports, and scripts using security/SIEM query languages.
Excellent written and verbal communication skills.
Ability to prioritize tasks and make timely security decisions.

Responsibilities

Monitor information security and network events and proactively respond to potential threats.
Perform alert triage, investigation, and internal SOC escalations.
Analyze logs, network captures, and endpoint telemetry to identify malicious activity and IOCs.
Investigate security alerts to determine scope, root cause, and potential impact.
Conduct initial threat hunting to identify suspicious activity and security anomalies.
Create, follow, and improve SOC playbooks and standard operating procedures.
Tune and optimize detection rules, alerts, and correlation logic to reduce false positives.
Document security incidents, investigations, and response activities accurately.
Monitor external threat intelligence sources for actionable security events.
Provide incident response support during security and network incidents.
Participate in root cause analysis and lessons-learned activities.
Create queries, reports, and scripts using SIEM query languages and security tools.
Work effectively both independently and as part of a SOC team.
Support a 24/7/365 security operations environment, including nights, weekends, and holidays.