Hybrid Security Operations Analyst — Incident Response

Thomson Reuters; Eagan (MN); Hybrid; USD 71,000 - 131,000; Full time

Benefits offered by this job

Hybrid work model

Mental health days off

Tuition reimbursement

Employee stock purchase plan

Job summary

Thomson Reuters Information Security and Risk Management (ISRM) seeks a Security Operations Analyst to join our global SOC. You will monitor security events, triage alerts, and coordinate responses across operating systems, networks, and cloud environments.

You will work with IDS/SIEM platforms, respond to incidents, and help improve detection coverage while producing clear reports and SOPs. This role offers hybrid work in the U.S.

Qualifications

• Minimum 2+ years in a SOC or incident response environment.
• Background or degree in cybersecurity, computer science, or related field.
• Hands-on experience investigating security events across operating systems, networks, and cloud environments.
• Familiarity with security tooling such as SIEM, EDR, antivirus, firewalls, forensics, and cloud security solutions.
• Familiarity with security automation/orchestration tools such as SOAR.
• Solid understanding of common attack techniques and defensive response strategies.
• Working knowledge of networking, operating systems, servers, and endpoints, with the ability to analyze security events.

Responsibilities

• Perform continuous security monitoring and incident response for a global enterprise environment.
• Respond to, analyze, and triage alerts from multiple security technologies, including IDS and SIEM platforms.
• Communicate security alerts and investigation findings to internal teams regarding potential intrusions or compromises.
• Collaborate with other ISRM teams to improve detection coverage and alert quality.
• Prepare clear briefings and written reports documenting analysis methodology and results.
• Create and maintain standard operating procedures and other SOC documentation.
• Produce end‑of‑shift reports to ensure effective handoff and continuity between analysts.
• Maintain accurate records of monitoring and response activities using case management and ticketing systems.

Skills

SOC experience

Incident response

Security monitoring

Networking basics

Cloud security

SOAR

SIEM experience

Education

Cybersecurity / Computer Science degree

Tools

SIEM

EDR

Antivirus

Firewalls

Forensics

Job description

Thomson Reuters Information Security and Risk Management (ISRM) seeks a Security Operations Analyst to join our global SOC. You will monitor security events, triage alerts, and coordinate responses across operating systems, networks, and cloud environments.

You will work with IDS/SIEM platforms, respond to incidents, and help improve detection coverage while producing clear reports and SOPs. This role offers hybrid work in the U.S.