Remote SOC Engineer II - Threat Detection & Incident Lead

CTS; United States; On-site; USD 80,000 - 85,000; Full time

Benefits offered by this job

Health Insurance

401(k) with company match

Paid Time Off

Flexible Spending Account

Affordable dental/vision care

Parental Leave

Commuter Benefits

Short-Term Disability

Long-Term Disability

Job summary

CTS seeks an experienced SOC Engineer - Level 2 to join our Security Operations Center. As a Level 2 SOC Engineer, you will monitor, analyze, and respond to incidents, guide Level 1 staff, and help strengthen our security posture in a fast-paced environment.

Expertise in SIEM/IDS/IPS, network and endpoint security, incident response, forensics, and scripting (Python/PowerShell) is required. You will handle advanced threats, contribute to SOC process improvements, and participate in rotating

Qualifications

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.
• Experience: 3-5 years of experience in a SOC or cybersecurity role, with at least 1-2 years at a Level 2 position or equivalent.
• Certifications: Relevant certifications such as CompTIA Security+, CompTIA CySA+, or equivalent are preferred.

Responsibilities

• Monitor and analyze security alerts and incidents.
• Lead incident management and coordinate response.
• Perform forensic analysis on compromised systems.
• Assist in vulnerability management and remediation.
• Maintain and optimize security tools (SIEM, IDS/IPS, firewalls).
• Mentor Level 1 SOC Engineers.
• Document incidents and response actions.
• Generate security reports and improve SOC processes.
• Participate in on-call rotations.

Skills

Security monitoring

Incident response

Guidance & mentoring

Threat analysis

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

SIEM

IDS/IPS

Firewalls

Endpoint protection

Python

PowerShell

AWS/Azure

Job description

CTS seeks an experienced SOC Engineer - Level 2 to join our Security Operations Center. As a Level 2 SOC Engineer, you will monitor, analyze, and respond to incidents, guide Level 1 staff, and help strengthen our security posture in a fast-paced environment.

Expertise in SIEM/IDS/IPS, network and endpoint security, incident response, forensics, and scripting (Python/PowerShell) is required. You will handle advanced threats, contribute to SOC process improvements, and participate in rotating