Hybrid SOC Analyst: Threat Detection & Response

Charter Solutions; Minneapolis, Saint Paul (MN, MN); Hybrid; USD 70,000 - 100,000; Full time

Job summary

Charter Solutions is seeking a contract Security Operations Center (SOC) Analyst to monitor, investigate, and respond to security events across our client's systems. This hybrid role covers alert triage, remediation, threat hunting, phishing analysis, and security tool administration.

The candidate should have 2+ years in a SOC, with hands-on work on Defender XDR, Sentinel, Entra ID, Intune, CrowdStrike, NGSIEM, and Active Directory audits; strong collaboration and thorough incident

Qualifications

• Minimum 2 years in a SOC or similar security operations role.
• Experience with alert triage, remediation and after-action documentation.
• Hands-on with Defender XDR, Sentinel, Entra ID, Intune, CrowdStrike and NGSIEM.

Responsibilities

• Log, analyze, and remediate security alerts; document incidents and responses.
• Proactively hunt for IOCs and investigate anomalies and suspicious IP activity.
• Analyze phishing emails, including header analysis and spoofing indicators.
• Operate and monitor security tools such as Defender XDR, Sentinel, Entra ID, Intune, CrowdStrike, NGSIEM.
• Create, update, and transfer incident tickets in ServiceNow.
• Collaborate with Cybersecurity Team and IT staff; document findings thoroughly.

Skills

Alert triage

Remediation

Threat hunting

Phishing analysis

Security tools

Collaboration

Documentation

Tools

Microsoft Defender XDR

Microsoft Sentinel

Entra ID

Intune

CrowdStrike

NGSIEM

Active Directory auditing

ServiceNow

Job description

Charter Solutions is seeking a contract Security Operations Center (SOC) Analyst to monitor, investigate, and respond to security events across our client's systems. This hybrid role covers alert triage, remediation, threat hunting, phishing analysis, and security tool administration.

The candidate should have 2+ years in a SOC, with hands-on work on Defender XDR, Sentinel, Entra ID, Intune, CrowdStrike, NGSIEM, and Active Directory audits; strong collaboration and thorough incident