Remote Tier II SOC Analyst - Threat Detection & Response

SYSTEMTEC; Columbia (SC); Remote; USD 70,000 - 110,000; Full time

Job summary

SYSTEMTEC is seeking a Tier II SOC Analyst for a remote opportunity to support enterprise security operations during EST hours. The role involves monitoring threats, investigating incidents, and strengthening detection and response within a large-scale SOC.

The ideal candidate will have 2+ years in threat analysis, incident response, dashboards, and SOC operations, with preference for certifications and experience with Cortex XSIAM/XDR and AD/VPN contexts.

Qualifications

• Requires 2+ years of threat analysis using MITRE ATT&CK framework.
• 2+ years creating security dashboards, metrics, and reports.
• 2+ years in security monitoring, threat detection, and incident response.
• Experience supporting large-scale Security Operations Center operations.
• Experience analyzing security events from SIEM, EDR, IDS/IPS, and threat intel sources.

Responsibilities

• Monitor and correlate security events across SIEM, EDR, IDS/IPS, and threat intel platforms.
• Investigate suspected security incidents, determine scope and root cause, and escalate high-priority findings.
• Respond to phishing reports, malware infections, and policy violations with containment and remediation.
• Produce incident reports, timelines, and post-incident summaries; suggest preventive measures.
• Refine alert thresholds, detection rules, and response playbooks; collaborate with engineering teams.
• Coordinate with agency reps, security engineers, and SOC staff to improve centralized services.

Skills

MITRE ATT&CK framework

Security dashboards & reports

Security monitoring & incident | e"

SOC operations

SIEM/EDR/IDS/IPS analysis

Root cause analysis & documentation

Communication & collaboration

Education

Associate degree in IT/InfoSec or related field

Tools

Palo Alto Cortex XSIAM/XDR

Active Directory / VPN technologies

Job description

SYSTEMTEC is seeking a Tier II SOC Analyst for a remote opportunity to support enterprise security operations during EST hours. The role involves monitoring threats, investigating incidents, and strengthening detection and response within a large-scale SOC.

The ideal candidate will have 2+ years in threat analysis, incident response, dashboards, and SOC operations, with preference for certifications and experience with Cortex XSIAM/XDR and AD/VPN contexts.