Security Operations Center Analyst, Cyber Defense
Our client, a US mortgage and financial services company, is expanding its Cyber Defense team and is adding a Security Operations Center (SOC) Analyst to help monitor, analyze, and respond to security events across the organization. The team protects the company's systems and data and works closely with IT and security stakeholders to keep detection and response consistent and effective.
About the Role
As a SOC Analyst, you'll be part of the team that triages security alerts, escalates incidents, and supports investigations. You'll work under the guidance of senior team members and the Cyber Incident Response function, gaining hands-on exposure to enterprise security tools, SOC playbooks, and best practices. This is a remote role covering US Central Time business hours, with participation in an on-call rotation.
What You’ll Do
- Monitor security alerts from SIEM, endpoint protection, email security, and other security tools
- Perform initial triage of potential security incidents and escalates according to established procedures
- Assist with phishing analysis, malware triage, and basic threat hunting
- Document security events, investigations, and remediation steps in the ticketing system
- Collaborate with IT and security teams to validate findings and improve detection capabilities
- Follow SOC playbooks and standard operating procedures to keep response actions consistent
- Take part in the on-call rotation and in ongoing security training to stay current on emerging threats
Required Qualifications
- Associate's or Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience
- Experience or hands-on exposure to security operations, monitoring, or incident triage (entry-level candidates welcome)
- Foundational knowledge of security concepts, operating systems, and common attack methods
- Relevant security certification such as CompTIA Security+ or CEH
- Strong analytical and problem-solving skills, with close attention to detail in documentation and reporting
- Ability to follow processes, escalates appropriately, and work collaboratively in a team
- Availability for US Central Time business hours and an on-call rotation
- Smartphone that meets company security standards and can run MFA apps such as Okta Verify and Microsoft Authenticator
- English level B2 or higher
Preferred Qualifications
- Hands-on familiarity with SIEM, endpoint protection (EDR), and email security platforms
- Exposure to phishing analysis, malware triage, or threat hunting
- Experience in financial services or other regulated industries
Technical Environment
- SIEM
- Endpoint protection / EDR
- Email security tools
- Ticketing system for incident documentation
Observed Business Competencies
- Process Discipline — The role follows SOC playbooks and SOPs and escalates according to established procedures.
- Collaboration — Works with IT and security teams to validate findings and improve detection capabilities.
- Continuous Learning — The PD calls out eagerness to learn in a fast-paced environment and ongoing security training.