Remote Global SOC Analyst - Threat Detection & Response

Openkrill; United States; Remote; USD 85,000 - 120,000; Full time

Job summary

Pragmatike is recruiting a Security Operations Analyst to join a global 24/7 Cybersecurity Operations Centre. You’ll monitor, detect, investigate, and respond to threats across cloud, endpoint, network, and enterprise environments.

This hands-on SOC role requires strong skills in security alert triage, log analysis, SIEM/EDR platforms, and incident response. You will work with specialists across regions while enabling proactive detection improvements.

Qualifications

• 5+ years of relevant IT/cybersecurity experience.
• Hands-on experience with security alert triage and incident investigation.
• Experience with SIEM and EDR platforms.

Responsibilities

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
• Investigate suspicious activity and identify potential root causes.
• Support incident response, remediation, and recovery activities.
• Coordinate with cybersecurity teams and escalate as needed.
• Work with Incident Response specialists to manage threats.
• Improve detection quality and reduce false positives.
• Assist with monitoring optimization and whitelist tuning.
• Prepare technical reports and security findings.
• Maintain SOC documentation and knowledge-base content.
• Contribute to process improvements and operational quality.

Skills

Security alert triage

Incident investigation

Log analysis

Cross-platform security

Communication skills

Team collaboration

Tools

SIEM platforms

EDR platforms

Microsoft Sentinel

Splunk

QRadar

ArcSight

ELK

MS Defender for Endpoint

Azure

AWS

GCP

Job description

Pragmatike is recruiting a Security Operations Analyst to join a global 24/7 Cybersecurity Operations Centre. You’ll monitor, detect, investigate, and respond to threats across cloud, endpoint, network, and enterprise environments.

This hands-on SOC role requires strong skills in security alert triage, log analysis, SIEM/EDR platforms, and incident response. You will work with specialists across regions while enabling proactive detection improvements.