Security Analyst

Hampton North; Nashville (TN); Hybrid; USD 41,000 - 48,000; Full time

Job summary

Hampton North in Nashville is seeking a SOC Analyst to join an in-house security team that has moved past the old reactive model into threat intelligence, threat hunting, and detection engineering. You will review detections, decide containment or escalation, and document actions clearly as the front line of defense.

This growth seat focuses on signal quality and SOC health over ticket counts, with coaching to advance toward threat hunting or intelligence as you prove yourself.

Qualifications

• Hands-on security operations or security engineering experience, ideally around two years in a SOC, detection, or security engineering capacity.
• Solid grasp of networking and data concepts, authentication, and how systems get secured.
• Comfort reviewing logs and building structured queries and regex searches.
• Familiarity with security operations and SIEM concepts. Exposure to Google SecOps is a plus, and Defender for Endpoint or XDR familiarity is a plus.
• Awareness of sandboxing concepts.
• Home lab or self-driven security tinkering is a strong signal we look for.
• CompTIA Security+ or similar certifications are a plus.
• Curiosity and humility: ask questions and show willingness to learn.

Responsibilities

• Monitor and triage alerts and detections, working primarily inside Google Security Operations.
• Investigate, contain, eradicate, or elevate detections with appropriate urgency.
• Run searches and research across Google SecOps and Microsoft Defender for Endpoint.
• Work against MITRE ATT&CK-driven detection coverage, where volume is high and low-value alerts are automated out.
• Document detections and response actions and produce reports for team review.
• Contribute to threat hunting, threat intelligence, and detection engineering efforts as you grow into them.
• Participate in the on-call rotation once ramped.
• Prioritize based on real risk and coverage rather than raw alert count.

Skills

SOC operations

Networking basics

Data concepts

Log review

Regex searches

SIEM concepts

Google SecOps

Microsoft Defender for Endpoint

Microsoft XDR

Sandboxing concepts

Home lab

Certifications (Security+)

Curiosity & humility

Tools

Google SecOps

Microsoft Defender for Endpoint

Microsoft XDR

SIEM

Job description

We are hiring a Nashville-based SOC Analyst to join an in-house security team that has moved past the old reactive, ticket-counting model and built a predictive operation around threat intelligence, threat hunting, and detection engineering. You will be the front line reviewing and triaging detections, deciding what to contain, elevate, or run down, and documenting your actions cleanly. This is a growth seat. The goal is to bring you in, coach you, and develop you toward threat hunting, detection engineering, or threat intelligence as you prove yourself. Success is measured on signal quality and SOC health, not how many tickets you close.

Compensation

$30-35/hr W2, long-term contract with benefits. Rates are revisited yearly as your capabilities and scope grow.

Logistics

Nashville, 4 days/week in office, 1 day remote once ramped up. 1 week/month on-call rotation

Here's what you'll be doing

• Monitor and triage alerts and detections, working primarily inside Google Security Operations
• Investigate, contain, eradicate, or elevate detections with appropriate urgency
• Run searches and research across Google SecOps and Microsoft Defender for Endpoint
• Work against MITRE ATT&CK-driven detection coverage, where volume is high and low-value alerts are automated out
• Document detections and response actions and produce reports for team review
• Contribute to threat hunting, threat intelligence, and detection engineering efforts as you grow into them
• Participate in the on-call rotation once ramped
• Prioritize based on real risk and coverage rather than raw alert count

And what you need to have

• Hands-on security operations or security engineering experience, ideally around two years in a SOC, detection, or security engineering capacity. Candidates who pair that foundation with genuine hunger to learn and grow are the target
• Solid grasp of networking and data concepts, authentication, and how systems get secured
• Comfort reviewing logs and building structured queries and regex searches
• Familiarity with security operations and SIEM concepts. Exposure to Google SecOps is a plus, and Microsoft Defender for Endpoint or Microsoft XDR familiarity is a plus
• Awareness of sandboxing concepts
• A home lab or self-driven security tinkering (Wazuh, Suricata, Pi-hole, anything you built and run yourself) is a strong signal we look for
• CompTIA Security+ or similar certifications are a plus, and relevant coursework counts
• Curiosity and humility. You ask questions, you say "I don't know, here's how I'd work through it," and you are hungry to keep improving