Remote SOC Analyst (Mid-Level) - Incident Response & Threat Hunting

ECS; Richmond (VA); Remote; USD 120,000 - 145,000; Full time

Job summary

ECS is seeking a SOC Mid-Level Analyst to work remotely within a mature 24x7 Security Operation Center. You will ingest, correlate, normalize, and analyze event messages to rapidly identify and respond to IoCs.

The ideal candidate has 5+ years of log analysis experience, a Bachelor's degree or equivalent, and experience with SIEM and SOAR. This full-time role follows a Sunday-Thursday 12:00AM–8:00AM ET shift and offers SOC responsibilities remotely under Everforth ECS.

Qualifications

• Minimum of 5 years experience conducting analysis of log data in support of intrusion analysis or information security operations.
• Bachelor's degree or equivalent with relevant certifications.
• Experience with two or more analysis tools used in a CIRT or similar investigative environment.

Responsibilities

• Continuously monitors SIEM and on-premises infrastructure/cloud applications for security events to threats & intrusions.
• Participates with responding to and handling all critical incident activity.
• Assists with creating and tuning SOAR playbooks and automated workflows.
• Performs proactive threat hunting to identify and characterize new threats.

Skills

5+ years log analysis

IoC analysis

Threat hunting mindset

Education

Bachelor's degree or equivalent

Tools

SIEM tools

SOAR

Job description

ECS is seeking a SOC Mid-Level Analyst to work remotely within a mature 24x7 Security Operation Center. You will ingest, correlate, normalize, and analyze event messages to rapidly identify and respond to IoCs.

The ideal candidate has 5+ years of log analysis experience, a Bachelor's degree or equivalent, and experience with SIEM and SOAR. This full-time role follows a Sunday-Thursday 12:00AM–8:00AM ET shift and offers SOC responsibilities remotely under Everforth ECS.