IT Compliance and Security/SOC Analyst

Babcock & Wilcox; Akron (OH); On-site; USD 70,000 - 110,000; Full time

Job summary

Babcock & Wilcox is seeking a Security Analyst to monitor security tools, triage alerts, investigate incidents, and support threat remediation. You will work within a SOC ecosystem, perform daily threat hunts, and contribute to improving detection logic and incident workflows.

The role emphasizes proactive, detail-oriented analysis, strong communication, and collaboration across teams while building a solid foundation in enterprise incident response and security posture management.

Qualifications

• Bachelor’s degree preferred, but 5+ years hands-on experience acceptable
• Certifications such as CompTIA Security+, CySA+, CEH preferred
• Experience with modern EDR solutions (MS Defender XDR, Crowdstrike, SentinelOne) and SIEM
• Experience with phishing review workflows and email header analysis
• Scripting languages (Python, PowerShell, KQL) a plus
• Strong analytical thinking and structured problem-solving under pressure
• Ability to work independently and in a team
• Clear written and verbal incident documentation and cross-team collaboration

Responsibilities

• Alert triage and monitoring of security tools and alerts
• Incident response and investigations following established playbooks
• Continuous improvement and documentation of processes and awareness materials
• Support ServiceDesk dashboard and incident/service request resolution

Skills

Analytical thinking

Structured problem-solving

Independent and collaborative work

Clear written and verbal communication

Education

Bachelor’s degree in Cybersecurity / Computer Science / Information Technology

Tools

MS Defender XDR

Crowdstrike

SentinelOne

SIEM

Job description

A security analyst plays a vital role in protecting the organization’s digital assets, networks, and infrastructure against cyber threats. This candidate will monitor security tools, perform analysis and triage on escalated threats from our external SOC, investigate potential incidents, perform daily threat hunts, and support threat remediation workflows. This role is ideal for a proactive detailed-oriented professional who looks to build a strong foundation in enterprise incident response, threat detection and security posture maintenance.

Key Responsibilities

• Alert Triage and Monitoring
  • Triage alerts from Microsoft tools, such as Defender XDR, Intune, Purview, and email gateway security solutions
  • Conduct initial analysis to distinguish genuine security incidents between false positives and benign positives
  • Escalate P1 alerts to leadership and fellow security analysts in accordance with established SLAs.
• Incident Response and Investigations
  • Execute response playbooks according to NIST SP 800-61/cyber kill chain standards for common threat vectors such as phishing, malware executive, unauthorized access, and compromised accounts
  • Apply containment measures including isolating affected endpoints, revoking compromised sessions, resetting of credentials, and blocking malicious indicators (IOCs).
• Continuous Improvement and Documentation
  • Contribute to the development and improvement of security awareness training and materials for employees.
  • Maintain precise, detailed reports of investigation tickets, triage steps and containment actions
  • Provide feedback to leadership and the external SOC to refine SIEM correlation rules, detection logic, and internal colleagues to reduce alert fatigue.
• ServiceDesk Dashboard
  • Contribute to resolving incident and service request tickets that are assigned to the Cybersecurity team

Qualifications & Skills

• Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology is preferred but will ascertain 5+ years hands-on experience in place of a degree
• Certifications such as CompTIA Security+, CySA+, CEH (Certified Ethical Hacker) is preferred
• Experience with modern EDR solutions (e.g. MS Defender XDR, Crowdstrike, SentinelOne) and SIEM
• Familiarity with phishing review workflows and email header analysis
• Experience with scripting languages (e.g., Python, PowerShell, Kusto Query Language (KQL) as its advanced threat-hunting) is a plus.
• Soft analytical thinking and structured problem-solving abilities under pressure.
• Ability to work independently and collaboratively within a team environment.
• Clear written and verbal communication for incident documentation and cross-team collaboration.
• Passion for continuous learning and keeping up to tactics, techniques, and procedures (TTPs).