CyberSOC Co-op - 2027 (US Green Shift)

Security Risk Advisors Intl.; Hawaii; On-site; USD 54,000 - 66,000; Full time

Benefits offered by this job

Mental health support

Professional development

Corps Training Program

Job summary

Security Risk Advisors (SRA) seeks a CyberSOC Co-Op to join our CyberSOC Practice, supporting 24x7 operations during the Green Shift hours (4:30PM - 1:30AM ET). You will work across tools like SIEM/EDR and contribute to incident investigations, documentation, and client communications.

New hires work in-office 4 of 5 days a week, with shifts assigned to cover mornings, days, or nights. Opportunity to participate in SRA Corps training and professional development.

Qualifications

• Punctuality and timely attendance to external client and internal stakeholder needs.
• Passion for technology.
• Ability to work as part of a team, yet handle independent responsibilities.
• Experience or coursework in incident investigation, digital forensics, information security, or computer networking.
• Flexibility to accommodate changing schedules and extended hours when needed.
• Strong written and verbal communication with professionalism.
• Skills: creative problem solving, attention to detail, coordination, reporting, teamwork, motivation, decision making, information analysis.

Responsibilities

• Continuously monitor and triage security alerts across endpoint, network, identity, and cloud telemetry.
• Investigate alerts to determine severity, scope, and whether activity is benign, suspicious, or malicious; escalate as needed.
• Perform initial incident response support activities such as evidence collection and timeline development.
• Use SIEM, EDR, NDR/NSM, and SOAR platforms to detect, investigate, and respond to threats (e.g., Splunk, Microsoft Sentinel, CrowdStrike Falcon, Microsoft Defender).
• Leverage threat intelligence and MITRE ATT&CK to enrich investigations and communicate attacker behavior clearly.
• Document work in case management systems with investigation steps and recommended actions.
• Communicate status and findings to internal leadership and clients professionally.
• Contribute to continuous improvement by identifying recurring false positives and tuning playbooks.
• Maintain proficiency through required training, labs, and knowledge sharing; protect confidential information.

Skills

Attention to detail

Teamwork

Communication skills

Problem solving

Self-direction

Tools

PowerShell

Python

Job description

SRA’s mission is tolevel up every day to protect our clients and their customers. This begins with our team members and their experience. SRA prides itself onmaintaininga culture where team members have a shared sense of support and belonging, consistent withour It’sPersonal company value. At SRA, we prioritize transparent career pathing, varied DEI programming and community groups, competitive benefits including mental health support, and an emphasis on a sustainable, healthy, and engaging work culture. SRA has twice been nameda BestPlace to Work by the Philadelphia Business Journal.

These Essential Functions, Requirements, and Skills are guidelines. If you are a candidate who does not meet this exact job description but candemonstrateexcellent organization, attention to detail, professionalism, flexibility, and self-direction in your professional background, we hope you apply.SRA values a diverse workplace and strongly encourages people of all backgrounds to apply.

Summary/Objective

TheCyberSOCCo-Op will be part of Security Risk Advisors’CyberSOCPractice, dedicated to the Green Shift hours of 4:30PM - 1:30AM Eastern. This role will be involved in the day-to-day, 24x7,andoperations oftheSOC. This is an outstanding opportunity to work with a wide variety of tool sets and various client organizations.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Continuouslymonitorand triage security alerts across endpoint, network, identity, and cloud telemetry.

• Investigate alerts todetermineseverity, scope, and whether activity is benign, suspicious, or malicious; esc... (escalate per documented procedures.)

• Perform initial incident response support activities such as evidence collection, timeline development, and basic containment recommendations under supervision.

• Use SIEM, EDR, NDR/NSM, and SOAR platforms to detect, investigate, and respond to threats; examples include Splunk or Microsoft Sentinel (SIEM), CrowdStrike Falcon or MicrosoftDefender forEndpoint (EDR).

• Leverage threat intelligence and common frameworks (e.g., MITRE ATT&CK) to enrich investigations and communicate attacker behavior clearly.

• Thoroughly document work in case management systems, including investigation steps taken, evidence reviewed, decisions made, and recommended next actions.

• Communicate status and findings to internal leadership and clients with professionalism and clarity (written and verbal).
• Contribute tocontinuous improvement byidentifyingrecurring false positives/noisy alerts and providing feedback for tuning and playbook updates.
• Maintainproficiencythrough required training, labs, and knowledge sharing; follow policies to protect confidential information.
• Protectorganization’svalue by keeping information confidential.

Supervisory Responsibility

Not applicable.

Work Environment

This joboperatesin a professional office environment,and all co-ops are expected to work in the office. This role routinely uses standard office equipment.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employeeis regularly required totalk and hear; use hands to finger, handle, or feel; and reach with hands and arms. The employeefrequentlyis required tostand and walk. This is alargely sedentaryrole.

Position Type/Expected Hours of Work

This is a full-time temporary co-op position with 40 working hours expected weekly, typically worked over five consecutive days. New hires may be assigned to any of our three daily shifts (morning, day, or night) and willworka schedule that includes either Saturday or Sunday. Shifts are assigned based on current coverage needs and resource geolocation. Once assigned, you can expect a consistentshiftweek to week.

Co-ops are expected to work in-person at their assigned office 4out of5 days per week unless otherwisepermittedby their supervisor.

Travel

N/A

Required Education and Experience

• Punctuality andtimelyattendance to external client and internal stakeholder needs.

• A demonstrated passion for technology.

• Work effectively as part of ateam, yetfunction well with independent responsibilities.

• Experience or coursework around incident investigation and forensics, informationsecurityand computer networking.Interest in taking the initiative for personal growth and development.
• Flexibility to accommodate changing schedules of client and project needs and willingness to work extended hours when needed.
• Strong written and verbal communication skills with a high level of professionalism.
• Other skills/competencies:creativeproblemsolving,attention todetail,coordination,reporting,teamwork,motivation,decisionmaking,information analysis.

Preferred Qualifications and Experience

• Residence in Hawaii-Aleutian Standard Time (HAST) zone preferred.

• Coursework, labs, internship, or work experience in one or more of: incident investigation, digitalforensicsfundamentals, information security, systems administration, or computer networking.

• Familiarity with common log sources and security concepts (e.g., authentication logs, Windows event logs, DNS, HTTP, email security).

• Comfort learning new tools and following documented processes; strong attention to detail and case documentation habits.

• Strong written and verbal communication skills and a high level of professionalism in client-facing environments.

• Ability to work effectively on a team while owning independent tasks and meeting deadlines.

• Interest in automation/scripting (e.g., PowerShell or Python)

• Security certifications (e.g., Security+, Network+).

Other Duties

Pleasenotethis job description is not designed to cover orcontaina comprehensive listing of activities, duties or responsibilities that arerequired ofthe employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

EEO Statement

Security Risk Advisorsisan Equal Opportunity Employer and prohibits discrimination or harassment of any kind. All employment decisions at SRA are based on business needs, job requirements, and individual qualifications, without regard to race, color, sex, sexual orientation, gender identity or expression, age, religion, national origin, disability, marital or family status, veteran status, medical condition, or any similar category protected under federal, state, or local laws.

Work with Experts:

Robust internal training program, plus Company-paid external training. SRA recognizes the value of professional development for employees. Therefore, we encourage our employees to pursue continuing education and role-specific training.

Corps Training Program:

Our SRA Corps training program is a six-week experience for new hires that begins with one week of orientation at our Philadelphia headquarters. Whether new hires are interns, co-ops or full-time consultants, SRA Corps members meet our founders, learn our values, and experience a day in the life of a cybersecurity consultant. Following orientation, Corps members return to their home office and participate in trainings such as Consulting 101, Enterprise Networks, Cloud Security, and more. Our leaders provide hands‑on offensive, defensive, and frameworks bootcamps.

Mental Health Services:

SRA has partnered with BetterHelp to provide SRA employees with free mental health support. BetterHelp connects individuals with licensed therapists for chat, video, and phone sessions.

Hourly Pay Rate: $30.00 USD