24x7 Cyber Incident Triage and Response Analyst

Cybersecurity Jobs; Philadelphia (Philadelphia County); Hybrid; USD 60,000 - 139,000; Full time

Job summary

Comcast in Philadelphia is seeking a security operations center (SOC) analyst to monitor signals, investigate incidents, and drive case closure with strong documentation and SLA discipline. This hybrid role in Philadelphia, PA supports 24x7 operations, with nights, weekends, or on-call rotations as needed.

You will own the incident lifecycle from intake through closure, applying analytical judgment to distinguish benign activity from true threats, while contributing to detection tuning and

Qualifications

• 2-4+ years in cybersecurity, SOC, or incident response.
• Experience monitoring production security alerts.
• Familiarity with SIEM, SOAR, EDR, and related tools.
• Understanding of networks, operating systems, and security controls.
• Knowledge of phishing, malware, credential abuse, and lateral movement.

Responsibilities

• Monitor security tools for alerts, suspicious activity and threats.
• Triage and resolve high-volume security events and incidents.
• Open, manage and close incidents with accurate classification and documentation.
• Conduct deeper analysis including event correlation and alert enrichment.
• Determine alert validity and appropriate response actions.
• Follow playbooks to contain, eradicate and recover from incidents.

Skills

SOC

Incident response

Analytical thinking

Networking basics

Threat knowledge

AI fundamentals

Education

Bachelor’s Degree

Tools

SIEM

SOAR

EDR

Python

PowerShell

Job description

Comcast in Philadelphia is seeking a security operations center (SOC) analyst to monitor signals, investigate incidents, and drive case closure with strong documentation and SLA discipline. This hybrid role in Philadelphia, PA supports 24x7 operations, with nights, weekends, or on-call rotations as needed.

You will own the incident lifecycle from intake through closure, applying analytical judgment to distinguish benign activity from true threats, while contributing to detection tuning and