Remote SOC Analyst — Automation-Driven Incident Response

OSIbeyond L.L.C.; Rockville (MD); Remote; USD 70,000 - 105,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Dental Insurance

Life Insurance

Short Term Disability

401K

PTO/Holidays

Job summary

OSIbeyond is seeking a SOC Analyst to join the Security Operations Center, delivering continuous detection, investigation, and response across client environments. The role focuses on validating alerts, leading incident response, and collaborating with the automation layer to improve detection.

This remote, full-time position aligns with a two-shift model (Day/Evening) in EST hours, with overnight automation support.

Qualifications

• Two+ years in security operations, incident response, or MSP environments.
• Experience investigating identity, endpoint, and email threats in Microsoft 365.
• Strong written and verbal client communications; remote, shift-based work.

Responsibilities

• Monitor client environments for security threats using SIEM, EDR, identity, and email protections.
• Triage alerts and determine true positives, benign activity, or tuning opportunities.
• Contain and remediate threats using automation, scripts, and documented playbooks.
• Provide clear client communications on incidents and status.
• Perform vulnerability scanning and support regulatory requirements (CMMC/NIST 800-171).
• Identify opportunities to automate repetitive tasks and improve detections.

Skills

SIEM operations

MITRE ATT&CK

EDR

Identity protection

Email security

Investigation discipline

Tools

SentinelOne

Blumira

Tines

Autotask

Entra ID

Vulnerability scanning

Job description

OSIbeyond is seeking a SOC Analyst to join the Security Operations Center, delivering continuous detection, investigation, and response across client environments. The role focuses on validating alerts, leading incident response, and collaborating with the automation layer to improve detection.

This remote, full-time position aligns with a two-shift model (Day/Evening) in EST hours, with overnight automation support.