Remote SOC Tier 2 Security Analyst — Threat Hunting

Placements24; Windsor Park (TN); À distance; USD 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Remote work flexibility

Health insurance

Dental insurance

Vision insurance

Retirement plan

Home office setup allowance

Paid holidays

Professional growth opportunities

Team collaboration

Résumé du poste

Placements24 is seeking a Security Analyst to join a SOC as a Tier 2 analyst, handling escalated alerts, performing in-depth investigations and threat hunting, with remote work flexibility.

You will use SIEM, IDS/IPS, and EDR tools to detect and mitigate threats, document findings, and help develop incident response playbooks. The role requires 3+ years in SOC, knowledge of networks and OS, and security certifications; strong communication and ability to work under pressure are essential.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field; relevant experience may substitute.
• Minimum of 3 years in a SOC environment (Tier 1 or Tier 2), incident response, or security analysis role.
• Strong understanding of networking protocols (TCP/IP, DNS, HTTP), OS (Windows, Linux), and common threats.
• Hands-on with SIEM platforms (Splunk, QRadar, ELK) and EDR solutions.
• Familiarity with IR methodologies and digital forensics concepts.
• Excellent analytical and problem-solving skills with keen attention to detail.
• Strong written and verbal communication skills, capable of clear documentation.
• Ability to work under pressure and manage multiple priorities.
• Certifications such as CompTIA Security+, CySA+, GSEC, or GCIA desirable.
• Experience with scripting languages (Python, PowerShell) a plus.

Responsabilités

• Analyze security alerts escalated from SOC Tier 1, performing in-depth investigations.
• Identify, investigate, and respond to security incidents across the organization's network and systems.
• Utilize SIEM, IDS/IPS, EDR, and other security tools to detect and analyze threats.
• Perform threat hunting to proactively identify malicious activity that may have bypassed existing controls.
• Document investigation findings, incident details, and remediation actions in a clear and concise manner.
• Develop and refine detection rules and use cases for the SIEM platform.
• Contribute to the creation and improvement of incident response playbooks and procedures.
• Collaborate with other IT teams and stakeholders to implement security controls and remediation steps.
• Stay up-to-date with the latest threat intelligence, vulnerabilities, and attack methodologies.
• Participate in on-call rotations as required.

Connaissances

SIEM utilization

EDR

Incident response

Threat hunting

Analytical thinking

Clear documentation

Communication skills

Scripting (Python, PowerShell)

Formation

Bachelor's degree in Cybersecurity / CS / IT

Outils

Splunk

QRadar

ELK Stack

EDR solutions

Description du poste

Placements24 is seeking a Security Analyst to join a SOC as a Tier 2 analyst, handling escalated alerts, performing in-depth investigations and threat hunting, with remote work flexibility.

You will use SIEM, IDS/IPS, and EDR tools to detect and mitigate threats, document findings, and help develop incident response playbooks. The role requires 3+ years in SOC, knowledge of networks and OS, and security certifications; strong communication and ability to work under pressure are essential.