Remote SOC Analyst I - Training, Growth & Impact

Mosaec; Northern (KY); Hybrid; USD 85,000 - 90,000; Full time

Benefits offered by this job

Unlimited PTO

Remote work

Parental leave

Health benefits

Equity

Salary transparency

Job summary

Expel is seeking an Associate SOC Analyst to join our MDR service on the front lines of threat detection and response. You’ll investigate alerts, analyze data, and communicate findings with empathy and precision across diverse environments from endpoint to cloud.

We train and mentor you, guiding from alert triage to full investigations. Expect hands-on experience, a collaborative culture, and a clear path to grow as you help protect real organizations while contributing to continuous security

Qualifications

• Fundamental understanding of TCP/IP, operating systems, and common network protocols.
• Experience with Windows, macOS, and Linux; CLI familiarity.
• Aware of cloud apps (O365, Okta) and cloud infrastructure (AWS, Azure, GCP).
• Familiarity with SIEM, EDR, IDS/IPS.
• Curiosity about attacker techniques and MITRE ATT&CK.
• 1–2 years IT or security experience preferred.

Responsibilities

• Analyze and investigate alerts to identify, assess, and respond to threats.
• Collaborate with teammates and customer security teams to remediate incidents.
• Conduct threat hunts and root-cause analysis to uncover attacker activity.
• Take ownership of alert triage through the full lifecycle—from detection to resolution.

Skills

TCP/IP

Operating systems

Cloud apps

SIEM/EDR/IDS

MITRE ATT&CK

Security fundamentals

Job description

Expel is seeking an Associate SOC Analyst to join our MDR service on the front lines of threat detection and response. You’ll investigate alerts, analyze data, and communicate findings with empathy and precision across diverse environments from endpoint to cloud.

We train and mentor you, guiding from alert triage to full investigations. Expect hands-on experience, a collaborative culture, and a clear path to grow as you help protect real organizations while contributing to continuous security