Remote Tier 2 SOC Analyst: AI-Driven Detections & Tuning

Socket.dev; Houston (TX); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Remote-friendly

Training opportunities

401k match

Healthcare

Job summary

Binary Defense seeks a client-facing Tier 2 SOC Analyst to join the Security Operations team and drive client detections, tuning, and remediation efforts. You will work hands-on to transform detection strategies and lead cross-functional feedback loops with the MDR provider.

You’ll apply deep technical knowledge across AI tools, SIEM and EDR, and coordinate with incident responders to reduce alerts and improve security posture.

Qualifications

• 3+ years security operations or equivalent experience.
• Artificial intelligence (AI) tools experience.
• Experience with SIEM and EDR tools.
• Experience mapping detections to common frameworks and risk reduction models.
• Familiarity with the latest trends in attacker TTPs.

Responsibilities

• Create internal alert strategy and process documentation for how client identifies alerting opportunities, prioritizes based on threat level, with a focus and priority on gaps
• Review alerts that are too noisy to tune and drive down alert fatigue
• Assess alerts that haven’t triggered to determine whether logic needs to
• Be the main point of contact to the MDR Provider’s Detection team
• Work with the client’s Incident Responders on alert feedback loops; analyze true and false positive alerts
• Create regular reporting cadence for of all detections created, rules tuned
• Contribute to client’s homegrown “Signal to Noise ratio” detection metric
• Coordinate with MDR Threat Hunting team to request and implement Sentinel One STAR rules
• Map detections to standard frameworks such as the Cyber Kill Chain
• Work with MDR provider on an ongoing tuning of the on-call criteria
• Perform attack surface reduction including full-scope change management, cross functional coordination, enterprise communication planning/execution, execution of changes in support of security remediation
• Provide vulnerability prioritization and analysis, ticketing, reporting, trending, metrics, assistance to patch teams on troubleshooting root cause of patching challenges
• Analyze stale identities and accounts, admin privileges, and recommend and implement improvements

Skills

Security Operations

AI tools

SIEM

EDR

Threat frameworks

Tools

SIEM

EDR

Job description

Binary Defense seeks a client-facing Tier 2 SOC Analyst to join the Security Operations team and drive client detections, tuning, and remediation efforts. You will work hands-on to transform detection strategies and lead cross-functional feedback loops with the MDR provider.

You’ll apply deep technical knowledge across AI tools, SIEM and EDR, and coordinate with incident responders to reduce alerts and improve security posture.