Cybersecurity SOC Analyst II: Incident Response & Mentoring

Utah; Salt Lake City, Northern (UT, KY); Hybrid; USD 73,000 - 93,000; Full time

Job summary

University of Utah is seeking a Cybersecurity Analyst Tier 2 to support the Security Operations Center. The role drives mid-tier incident investigations, performs root cause analysis, and enhances operational capabilities.

You will bridge Tier 1 monitoring and Tier 3 engineering, handling complex security events and refining response playbooks. Responsibilities include mentoring junior analysts, tuning detections across SIEM/EDR/cloud, and partnering with Tier 3 to improve incident response.

Qualifications

• Requires a bachelor’s degree (or equivalent) with 4+ years in cybersecurity operations.
• Experience in SOC environments with incident response and triage.
• Strong knowledge of Windows/Linux logs, cloud environments (AWS/Azure/GCP), network traffic, and identity platforms.

Responsibilities

• Investigate complex security incidents across endpoint, network, cloud, and identity domains.
• Serve as escalation point for Tier 1 analysts and guide active triage.
• Tune detection logic across SIEM/EDR/cloud to reduce false positives and improve alerts.
• Mentor Tier 1 analysts and improve SOC workflows and response playbooks.

Skills

Incident response

Detection & playbook

Threat analysis

Leadership & mentoring

Education

Bachelor’s degree or equivalent

Tools

SIEM

EDR

SOAR

KQL / SPL

Job description

University of Utah is seeking a Cybersecurity Analyst Tier 2 to support the Security Operations Center. The role drives mid-tier incident investigations, performs root cause analysis, and enhances operational capabilities.

You will bridge Tier 1 monitoring and Tier 3 engineering, handling complex security events and refining response playbooks. Responsibilities include mentoring junior analysts, tuning detections across SIEM/EDR/cloud, and partnering with Tier 3 to improve incident response.