Remote SOC Analyst: Threat Detection & Incident Response

Us Tech Solutions; Columbia (SC); Remote; USD 70,000 - 110,000; Full time

Job summary

US Tech Solutions is seeking a Security Operations Analyst to support security monitoring, threat detection, incident response, and investigations. This 12-month engagement emphasizes correlating event data across SIEM/EDR/IDS-IPS, performing deep-dives, and producing incident timelines and remediation recommendations.

Responsibilities include phishing/malware investigations, updating SOC playbooks, and mentoring teams while acting as a customer-facing SME.

Qualifications

• Associate's degree in an information technology or information security related field.
• Four years of relevant work experience may be substituted in lieu of education.
• Two years of experience in supporting large SOC operations.

Responsibilities

• Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents.
• Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalated critical incidents with detailed context to Tier 3 as required.
• Create detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and preventative measures.
• Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal/external teams on containment and recovery actions.
• Recommend updates to SOC playbooks and workflows based on real-world INVESTIGATIONS, fine-tune detection rules, alert thresholds, and correlation logic to reduce false positives.
• Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned; integrate new threat intelligence feeds into workflows and proactively hunt for threats using up-to date TTPs.
• Serve as a customer-facing SME, selling the value of Client services by demonstrating capabilities and resolving issues.
• Document processes, runbooks, and troubleshooting steps related to SOC operations.
• Coordinate with engineering, SOC, and agency staff as needed to meet goals.
• Other duties as needed.

Skills

Security Monitoring

Incident Response

MITRE ATT&CK

Education

Associate's degree in IT or information security

4 years of relevant work experience substitution

2+ years in supporting large SOC operations

Tools

Palo Alto Cortex XSIAM/XDR

Linux

Firewalls & VPN

Active Directory

IDS/IPS

Job description

US Tech Solutions is seeking a Security Operations Analyst to support security monitoring, threat detection, incident response, and investigations. This 12-month engagement emphasizes correlating event data across SIEM/EDR/IDS-IPS, performing deep-dives, and producing incident timelines and remediation recommendations.

Responsibilities include phishing/malware investigations, updating SOC playbooks, and mentoring teams while acting as a customer-facing SME.