Security Analyst: Incident Response & SOC Expert

HTC Global Services; Columbia (SC); On-site; USD 85,000 - 125,000; Full time

Job summary

HTC Global Services in Columbia, SC seeks a Security Analyst focused on Incident Response and SOC Operations. You will monitor security events, investigate incidents, and improve detection and response workflows while collaborating with engineering teams and clients to strengthen security postures.

Responsibilities include incident analysis, reporting, post-incident reviews, and advisory on containment for threats. This role requires ET hours and onsite availability as needed.

Qualifications

• Associate's degree in IT or security or 4+ years of relevant work experience.
• 2+ years in security monitoring and incident response.
• 2+ years with MITRE ATT&CK framework and related analytics.
• 2+ years of dashboard creation and SOC reporting.
• Experience supporting large SOC operations.

Responsibilities

• Continuously review security data across SIEM/EDR/IDS to identify threats.
• Analyze incidents, determine root cause, and escalate Tier 3 when needed.
• Create incident reports, timelines, and post-incident summaries.
• Respond to phishing, malware, and policy violation events with containment guidance.
• Improve SOC playbooks, tune detection rules and reduce false positives.
• Collaborate to configure tools, integrate threat feeds, and hunt for threats.
• Serve as customer-facing SME and communicate SOC capabilities.
• Document SOC processes, runbooks, and troubleshooting steps.
• Coordinate with engineering, SOC staff, and agencies to meet goals.

Skills

Security monitoring

Incident response

MITRE ATT&CK

Dashboard reporting

SOC operations

Education

Associate degree or equivalent

Tools

Palo Alto Cortex XSIAM

Linux

Active Directory

Firewall administration

VPN technology

IDS/IPS

SIEM

EDR

CISSP/CISA

Job description

HTC Global Services in Columbia, SC seeks a Security Analyst focused on Incident Response and SOC Operations. You will monitor security events, investigate incidents, and improve detection and response workflows while collaborating with engineering teams and clients to strengthen security postures.

Responsibilities include incident analysis, reporting, post-incident reviews, and advisory on containment for threats. This role requires ET hours and onsite availability as needed.