Remote SOC Threat Detection & Incident Response Analyst

Tech Net Inc; Folsom (CA); Remote; USD 95,000 - 135,000; Full time

Job summary

Technet seeks a SOC Threat Detection & Incident Response Analyst to monitor security events across cloud, on-premises, and applications, providing triage, correlation, and response actions with a focus on utility-scale data platforms.

You will work with CrowdStrike Falcon, Wazuh, and AWS security services to detect threats, perform proactive hunting, and support containment and evidence preservation under CEOP/CIRP-aligned processes.

Qualifications

• 3+ years in a SOC, threat analysis, or incident response role.
• Direct experience analyzing alerts and logs in CrowdStrike Falcon, Wazuh, and AWS Security Hub/GuardDuty.
• Knowledge of cloud KMS, IAM abuse patterns, and web app attack vectors (OWASP Top 10).
• Experience with Windows Event Logs, IIS logs, and SQL Server audit logs.

Responsibilities

• Monitor cloud, endpoint, network, and application security alerts.
• Correlate signals across multiple sources to identify attack chains.
• Conduct threat hunts focused on cloud credential hijacking and IAM privilege escalation.
• Execute incident response playbooks and containment actions.

Skills

SOC experience

Threat analysis

Incident response

Threat hunting

Log analysis

Cloud security

Tools

CrowdStrike Falcon

Wazuh

ELK/OpenSearch/Splunk

AWS Security Hub/GuardDuty

Job description

Technet seeks a SOC Threat Detection & Incident Response Analyst to monitor security events across cloud, on-premises, and applications, providing triage, correlation, and response actions with a focus on utility-scale data platforms.

You will work with CrowdStrike Falcon, Wazuh, and AWS security services to detect threats, perform proactive hunting, and support containment and evidence preservation under CEOP/CIRP-aligned processes.