MSSP SOC Analyst

Districttechgroup; Washington (District of Columbia); Remote; USD 75,000 - 115,000; Full time

Benefits offered by this job

Fully remote work environment

Competitive salary and performance bonuses

Health, dental, and vision insurance

Professional development and certification support

Mentorship from industry-leading security experts

Job summary

A cybersecurity firm is searching for an MSSP SOC Analyst to serve as the first line of defense for clients. Responsibilities include monitoring security events, analyzing threats, and responding to incidents in real-time. Ideal candidates have at least 2 years of experience in a security analyst role, strong knowledge of the MITRE ATT&CK framework and SIEM platforms. The position offers a fully remote work environment, competitive salary, and benefits including health and professional development support.

Qualifications

• 2+ years of experience in a SOC or security analyst role.
• Strong understanding of common attack vectors and the MITRE ATT&CK framework.
• Experience with SIEM platforms and EDR solutions.
• Experience with SIEM platforms (Splunk, Sentinel, QRadar, or similar).
• Familiarity with EDR solutions (CrowdStrike, SentinelOne, Microsoft Defender).
• Knowledge of network protocols, firewalls, and intrusion detection systems.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to work in a fast-paced, 24/7 environment.

Responsibilities

• Monitor and analyze security events and alerts.
• Triage and investigate potential security incidents.
• Perform initial incident response and containment activities.
• Document incidents and maintain detailed case notes.
• Collaborate with client security teams to resolve security issues.
• Contribute to the development of detection rules and playbooks.
• Participate in threat hunting activities and proactive security monitoring.
• Provide clear communication to clients regarding security events and recommendations.

Skills

Experience in a SOC or security analyst role

Understanding of common attack vectors and TTPs

Experience with SIEM platforms

Familiarity with EDR solutions

Knowledge of network protocols and firewalls

Analytical and problem-solving skills

Strong communication skills

Ability to work in a fast-paced environment

Tools

SIEM platforms (Splunk, Sentinel, QRadar)

EDR solutions (CrowdStrike, SentinelOne, Microsoft Defender)

QRadar

CrowdStrike

SentinelOne

Microsoft Defender

Job description

As an MSSP SOC Analyst, you will be the first line of defense for our clients, monitoring security events, analyzing threats, and responding to incidents in real-time. You will work within our 24/7 Security Operations Center to protect organizations across multiple industries.

Responsibilities

• • Monitor and analyze security events and alerts from SIEM, EDR, and other security tools
• • Triage and investigate potential security incidents, escalating as necessary
• • Perform initial incident response and containment activities
• • Document incidents and maintain detailed case notes
• • Collaborate with client security teams to resolve security issues
• • Contribute to the development of detection rules and playbooks
• • Participate in threat hunting activities and proactive security monitoring
• • Provide clear communication to clients regarding security events and recommendations

Qualifications

• ✓ 2+ years of experience in a SOC or security analyst role
• ✓ Strong understanding of common attack vectors, TTPs, and the MITRE ATT&CK framework
• ✓ Experience with SIEM platforms (Splunk, Sentinel, QRadar, or similar)
• ✓ Familiarity with EDR solutions (CrowdStrike, SentinelOne, Microsoft Defender)
• ✓ Knowledge of network protocols, firewalls, and intrusion detection systems
• ✓ Excellent analytical and problem-solving skills
• ✓ Strong written and verbal communication skills
• ✓ Ability to work in a fast-paced, 24/7 environment

Preferred Qualifications

• + Security certifications (Security+, CySA+, GCIH, or equivalent)
• + Experience in an MSSP or managed services environment
• + Scripting skills (Python, PowerShell, or Bash)
• + Experience with cloud security (AWS, Azure, GCP)
• + Background in incident response or digital forensics

What We Offer

• ★ Fully remote work environment
• ★ Competitive salary and performance bonuses
• ★ Health, dental, and vision insurance
• ★ Professional development and certification support
• ★ Mentorship from industry-leading security experts