Remote SOC Engineer - Threat Detection & Incident Response

Zoho; United States; Remote; USD 110,000 - 160,000; Part time

Job summary

Fyerx is seeking an experienced SOC Analyst/Engineer to monitor, detect, analyze, and respond to cyber threats across our global enterprise. You will orchestrate real-time security monitoring using SIEM/SOAR platforms, perform deep analysis of anomalous events, and implement rapid containment workflows to safeguard networks.

The ideal candidate has 4–7 years of IT security experience in a mature SOC, with certifications such as CISSP, Security+, CEH, or GCIH.

Qualifications

• 4–7 years of core IT security experience.
• 3+ years actively executing real-time threat detection and incident response in a mature SOC.
• Mandatory certification: Security+, CEH, GCIH, or CISSP.
• Deep understanding of network architecture, TCP/IP, common attack vectors, and OS security.

Responsibilities

• Monitor real-time security alerts across a multi-tenant infrastructure.
• Lead incident triage and analysis, prioritizing alerts based on risk and impact.
• Execute rapid threat containment workflows: isolate infected endpoints and revoke access tokens.
• Tune SIEM correlation rules to improve detection accuracy and reduce noise.
• Develop and automate SOAR playbooks to speed up incident response actions.
• Perform malware analysis and threat hunting; map findings to MITRE ATT&CK.
• Document post-incident reviews and remediation needs.

Skills

Threat detection

Incident response

SIEM

SOAR

Network security

Tools

Splunk

Microsoft Sentinel

Cortex XSOAR

Splunk SOAR

Job description

Fyerx is seeking an experienced SOC Analyst/Engineer to monitor, detect, analyze, and respond to cyber threats across our global enterprise. You will orchestrate real-time security monitoring using SIEM/SOAR platforms, perform deep analysis of anomalous events, and implement rapid containment workflows to safeguard networks.

The ideal candidate has 4–7 years of IT security experience in a mature SOC, with certifications such as CISSP, Security+, CEH, or GCIH.