CSOC Analyst - Threat Detection & Incident Response

BTSE; United States; Híbrido; USD 120.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive compensation

Team-building programs & events

Descripción de la vacante

BTSE is seeking a Cyber Security Operations Center (CSOC) Analyst with 3–4 years of experience in security monitoring, detection engineering, and incident response. You will work with our MSSP and internal teams to validate detections, build playbooks, and own incidents end-to-end, not just triage.

Collaboration with regional partners may require Chinese language skills. You will develop detection rules, tune SIEMs, and help scale insider threat monitoring while ensuring proper documentation and

Formación

• Bachelor's degree in a cybersecurity/IT-related field.
• Hands-on SOC experience in security monitoring, detection engineering, and incident response.
• Experience with SIEM rule development, and reading raw logs beyond dashboards.
• Proficient scripting in Python for automation and tooling enhancements.
• Familiarity with MITRE ATT&CK mapping and incident response playbooks.

Responsabilidades

• Triage, analyze, and escalate security alerts across SIEM, EDR/XDR, WAF, email security, and cloud logs.
• Own incidents end-to-end from triage to resolution; create playbooks and update detection logic.
• Develop, tune, and validate SIEM detection rules and perform detection validation exercises.
• Translate threat intel and hunting queries into defined, actionable responses.
• Support insider threat monitoring and privileged-access anomaly detection.
• Verify onboarding and functioning of detection tooling managed by MSSP.
• Track CSOC performance metrics and contribute to continuous improvements.
• Document operations, playbooks, and detection rationales for knowledge retention.
• Collaborate with stakeholders, including regional teams with potential Chinese language needs.

Conocimientos

SIEM tools

Detection rule development

Query languages (ESQL/EQL/KQL)

Alert triage & case management

Python scripting

MITRE ATT&CK mapping

Incident response frameworks

IAM analytics

Cloud security

Log analysis

Educación

Bachelor's degree in Cybersecurity, IT, CS

Herramientas

SIEM platforms

Descripción del empleo

BTSE is seeking a Cyber Security Operations Center (CSOC) Analyst with 3–4 years of experience in security monitoring, detection engineering, and incident response. You will work with our MSSP and internal teams to validate detections, build playbooks, and own incidents end-to-end, not just triage.

Collaboration with regional partners may require Chinese language skills. You will develop detection rules, tune SIEMs, and help scale insider threat monitoring while ensuring proper documentation and