Jr. SOC Monitoring Analyst

Kelly; Hartford (CT); On-site; USD 90,000 - 130,000; Full time

Job summary

Kelly is seeking a Security Analyst to be the first line of defense protecting enterprise infrastructure. You will monitor network traffic, analyze security alerts, and execute incident response procedures to mitigate threats in a fast-paced environment.

Collaborate across Corporate IT and business units to safeguard digital assets, lead containment, triage events, and drive SOP improvements. Strong SIEM, log analysis, and network fundamentals are required.

Qualifications

• Bachelor’s degree or equivalent experience in Cyber Security or related field.
• Experience or coursework relevant to enterprise security operations.

Responsibilities

• Threat monitoring and incident response execution to mitigate cyber threats.
• Analyze logs from servers, endpoints, and network devices to investigate alerts.
• Containment, eradication, and recovery procedures following incidents.
• Triage security events by severity and business impact.
• Escalate validated threats to senior engineers and stakeholders.
• Collaborate with Corporate IT teams to resolve security issues.
• Develop, revise, and optimize SOPs for security processes.

Skills

SIEM mastery

Log analysis

Network inspection

Networking fundamentals

Endpoint protection

Education

Bachelor’s degree in Cyber Security or Computer Science or Network Infrastructure

Experience Equivalent

Job description

In this role, you will serve as the first line of defense protecting enterprise infrastructure. You will monitor network traffic, analyze security alerts, and execute incident response procedures to mitigate cyber threats. This position offers a fast-paced environment where you will collaborate across corporate IT and business units to safeguard our organization's digital assets.

Core Responsibilities

• Threat Monitoring: Track live alerts across SIEM, IDS/IPS, firewalls, and proxies.
• Alert Investigation: Analyze logs from servers, endpoints, and enterprise network devices.
• Incident Response: Execute established containment, eradication, and recovery procedures.
• Risk Categorization: Triage security events based on severity and business impact.
• Incident Escalation: Route validated threats to senior engineers and stakeholders.
• Cross-Team Collaboration: Partner with Corporate IT teams to resolve security issues.
• Process Improvement: Develop, revise, and optimize standard operating procedures (SOPs).

Required Technical Skills

• SIEM Mastery: Searching, filtering, and interpreting data in Splunk or similar platforms.
• Log Analysis: Understanding Windows Event Logs, Linux Syslog, and firewall data.
• Network Inspection: Analyzing packet captures via Wireshark or tcpdump.
• Networking Fundamentals: Strong grasp of TCP/IP, network topologies, and protocols.
• Endpoint Protection: Familiarity with EDR tools like Carbon Black, Tanium, or CrowdStrike.

Education & Certifications

• Degree: Bachelor’s degree in Cyber Security or Computer Science or Network Infrastructure
• Experience Equivalent: Relevant work history or intensive academic coursework in lieu of a degree.