Soc Analyst Jobs

About The Position

Requirements

• 5+ years of experience in a cybersecurity analyst role, with at least 2 years in a lead or senior-level capacity.
• Proven hands-on experience with SIEM, EDR, NDR, and DFIR toolsets.
• In-depth understanding of attacker TTPs (MITRE ATT&CK) and strong investigative mindset.
• Experience responding to incidents in cloud environments (AWS, Azure, GCP).
• Excellent written and verbal communication skills, especially in cross-functional and high-pressure scenarios.
• Ability to guide and inspire analysts of varying experience levels.
• Ability to work 9:00AM-5:00PM EST/CST/PST
• Participate in a 24/7 on-call rotation
• Demonstrate flexibility and ownership during incidents and surge periods.
• Collaborate closely with the DART Manager on planning, capacity tracking, and continuous team improvement.

Nice To Haves

• GIAC Security Expert (GSE)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• CompTIA Cybersecurity Analyst (CySA+)
• OSCP – Offensive Security Certified Professional
• CISSP – Certified Information Systems Security Professional
• Microsoft Certified: Cybersecurity Architect Expert or AWS Certified Security
• CompTIA Security Plus (Sec +)

Responsibilities

• Coordinate daily DART shift activities to ensure smooth operations and adequate coverage.
• Act as an escalation point for high-priority security alerts and investigations.
• Conduct QA reviews on tickets to ensure accuracy, completeness, and adherence to IR procedures.
• Lead shift handovers, ensuring continuity and communication across regions.
• Monitor, query, and triage security alerts using SIEM, EDR, and NDR platforms.
• Perform in-depth investigations into potential threats, applying TTP-based analysis and leveraging internal tools.
• Collaborate with business units and technical teams during incident response to gather context and execute containment or remediation.
• Provide structured documentation and recommendations post-incident.
• Mentor junior and mid-level analysts during investigations and incident response.
• Support onboarding and continuous training through documentation, coaching, and hands-on guidance.
• Promote a culture of collaboration, accountability, and continuous improvement across shifts.
• Help identify tooling or workflow gaps; provide recommendations to the DART Manager for improvements.
• Contribute to the creation and refinement of playbooks and operational procedures.
• Participate in tuning detection content and use-case development in partnership with threat detection teams.
• Assist in tracking key performance indicators (Time to Detect, Time to Resolve, Escalation Ratios, etc.).
• Support reporting functions by summarizing incidents and shift activities in alignment with team OKRs.

Benefits

• Medical, vision, dental and mental health benefits for you and your family, with access to a health care concierge, and Flexible or Health Savings Accounts (FSA or HSA)
• Free concert tickets
• Generous paid time off including paid holidays, sick time, and personal days
• 401(k) program with company match
• Stock reimbursement program
• New parent programs including caregiver leave and baby bonuses, plus fertility, adoption, foster, or surrogacy support
• Career and skill development programs with School of Live, tuition reimbursement, and student loan repayment
• Volunteer time off
• Crowdfunding match