AI-Driven Tier 2 SOC Analyst - Remote & Remediation Lead

Binary Defense; Houston (TX); Hybrid; USD 70.000 - 100.000; Vollzeit

Benefits dieser Stelle

Remote-friendly work environment

Zusammenfassung

Binary Defense is seeking a Tier 2 SOC Analyst to serve as a hands-on contributor within the Security Operations team, focusing on detection strategy, rule tuning, and remediation. The role involves working with AI tools, SIEM/EDR platforms, and cross-functional feedback loops.

Responsibilities include alert strategy, reducing alert fatigue, and coordinating with the MDR provider’s Detection team to map detections to known frameworks and improve security posture.

Qualifikationen

• 3+ years in security operations or equivalent experience.
• Experience with AI tools.
• Experience mapping detections to SIEM/EDR and frameworks.
• Familiarity with attacker TTP trends.

Aufgaben

• Create alert strategy and documentation for identifying opportunities and prioritizing by threat level.
• Tune noisy alerts to reduce alert fatigue.
• Assess non-triggered alerts and adjust logic as needed.
• Serve as main contact to the MDR Provider’s Detection team.
• Work with Incident Responders on alert feedback and true/false positives.
• Establish reporting cadence for detections and tuned rules.
• Contribute to the Signal to Noise detection metric.
• Coordinate with MDR Threat Hunting to implement STAR rules.
• Map detections to Cyber Kill Chain.
• Lead on-call tuning and ongoing change management for remediation.
• Prioritize vulnerabilities and assist patch teams with root cause analysis.
• Analyze stale identities and admin privileges for improvements.

Kenntnisse

Security Operations

AI tools experience

SIEM

EDR

Threat intelligence

Tools

Splunk

Proofpoint

SentinelOne

SIEM

Jobbeschreibung

Binary Defense is seeking a Tier 2 SOC Analyst to serve as a hands-on contributor within the Security Operations team, focusing on detection strategy, rule tuning, and remediation. The role involves working with AI tools, SIEM/EDR platforms, and cross-functional feedback loops.

Responsibilities include alert strategy, reducing alert fatigue, and coordinating with the MDR provider’s Detection team to map detections to known frameworks and improve security posture.