Remote SOC Analyst: 24x7 Threat Detection

Arctiq; Nashville (TN); Teletrabalho; USD 70 000 - 100 000; Tempo integral

Resumo da oferta

Arctiq in Nashville is seeking multiple SOC Analysts (Tier 1/2) to staff Day, Swing, and Night shifts across a diverse client portfolio. You will monitor detections, triage alerts, lead investigations, and execute response playbooks to rapidly contain threats.

This role offers frontline security operations exposure, collaboration with Detection Engineering, and requirement to maintain audit-grade case documentation.

Qualificações

• 1+ years in IT security or IT with security duties.
• Knowledge of TCP/IP, protocols, Windows and Linux basics, AD/Entra ID, cloud basics.
• Familiarity with at least one SIEM and one EDR/XDR platform; ability to write/modify basic queries (KQL, SPL).
• Strong communication and collaboration in a diverse high-performance team.
• Background examination will be required.

Responsabilidades

• Monitor and triage alerts across SIEM, EDR/XDR, identity, email, network, and cloud telemetry for managed clients.
• Investigate suspicious activity end-to-end using MITRE ATT&CK framework and cyber kill chain concepts.
• Execute documented response playbooks to contain threats and coordinate with clients and engineering teams.
• Partner with Detection Engineering to improve analytics, automations, and SOAR playbooks.
• Maintain audit-grade documentation in the case-management system.
• Meet triage, investigation, and notification SLAs with high accuracy and client satisfaction.
• Drive SOC improvements by feeding lessons learned back into detections and playbooks.

Conhecimentos

IT security basics

Cloud basics

SIEM / EDR familiarity

TCP/IP knowledge

Windows / Linux fundamentals

KQL / SPL querying

Ferramentas

SIEM platforms

EDR/XDR platforms

Ticketing / case-management systems

Descrição da oferta de emprego

Arctiq in Nashville is seeking multiple SOC Analysts (Tier 1/2) to staff Day, Swing, and Night shifts across a diverse client portfolio. You will monitor detections, triage alerts, lead investigations, and execute response playbooks to rapidly contain threats.

This role offers frontline security operations exposure, collaboration with Detection Engineering, and requirement to maintain audit-grade case documentation.