SOC Mid-Level Analyst

ECS Tech Inc•New York, NY

1d•$120,000 - $145,000•Remote

About The Position

ECS is seeking a Mid-Level SOC Analyst to work remotely. The role supports the development of processes, procedures, and automations to rapidly ingest, aggregate, correlate, normalize, and analyze event messages to identify and respond to Indicators of Compromise (IoCs). The successful candidate is a critical thinker and continual learner with experience working in a mature 24x7x365 Security Operations Center. The shift schedule is Sunday through Thursday, 12:00 AM to 8:00 AM ET, subject to change. The salary range is $120,000–$145,000. General benefits information is provided at https://ecstech.com/careers/benefits.

Requirements

At least 5 years of experience conducting log-data analysis in support of intrusion analysis or information security operations.
Bachelor’s degree or equivalent, with relevant certifications.
Experience with two or more analysis tools used in a CIRT or similar investigative environment.
Ability to build content in a SIEM system.
Ability to analyze and triage IoCs.
Experience working in a mature 24x7x365 Security Operations Center.

Responsibilities

Continuously monitor SIEM, on-premises infrastructure, and cloud applications for security events, threats, and intrusions, including the SIEM alert queue, phishing email inbox, intelligence feeds, and incident ticketing queue.
Participate in responding to and handling critical incidents, ensuring proper containment, remediation, and recovery activities.
Assess and document lessons learned during post-incident reviews, including unsuccessful controls, outdated procedures, and incomplete remediation actions.
Coordinate with SIEM engineering to tune security events and alerts and improve alert fidelity.
Assist with creating and tuning Security Orchestration and Automation (SOAR) playbooks and automated workflows.
Conduct proactive threat hunting to identify and characterize emerging threats, vulnerabilities, and risks.
Work with Cyber Threat Intelligence to provide information on detection patterns for upcoming threats.
Compile and disseminate threat hunt reports requested for specific hunts or threat inquiries to SOC leadership.
Research and document events of interest within the scope of cybersecurity.