Security Analyst - SOC Tier 2

Placements24; Windsor Park (TN); À distance; USD 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Remote work flexibility

Health insurance

Dental insurance

Vision insurance

Retirement plan

Home office setup allowance

Paid holidays

Professional growth opportunities

Team collaboration

Résumé du poste

Placements24 is seeking a Security Analyst to join a SOC as a Tier 2 analyst, handling escalated alerts, performing in-depth investigations and threat hunting, with remote work flexibility.

You will use SIEM, IDS/IPS, and EDR tools to detect and mitigate threats, document findings, and help develop incident response playbooks. The role requires 3+ years in SOC, knowledge of networks and OS, and security certifications; strong communication and ability to work under pressure are essential.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field; relevant experience may substitute.
• Minimum of 3 years in a SOC environment (Tier 1 or Tier 2), incident response, or security analysis role.
• Strong understanding of networking protocols (TCP/IP, DNS, HTTP), OS (Windows, Linux), and common threats.
• Hands-on with SIEM platforms (Splunk, QRadar, ELK) and EDR solutions.
• Familiarity with IR methodologies and digital forensics concepts.
• Excellent analytical and problem-solving skills with keen attention to detail.
• Strong written and verbal communication skills, capable of clear documentation.
• Ability to work under pressure and manage multiple priorities.
• Certifications such as CompTIA Security+, CySA+, GSEC, or GCIA desirable.
• Experience with scripting languages (Python, PowerShell) a plus.

Responsabilités

• Analyze security alerts escalated from SOC Tier 1, performing in-depth investigations.
• Identify, investigate, and respond to security incidents across the organization's network and systems.
• Utilize SIEM, IDS/IPS, EDR, and other security tools to detect and analyze threats.
• Perform threat hunting to proactively identify malicious activity that may have bypassed existing controls.
• Document investigation findings, incident details, and remediation actions in a clear and concise manner.
• Develop and refine detection rules and use cases for the SIEM platform.
• Contribute to the creation and improvement of incident response playbooks and procedures.
• Collaborate with other IT teams and stakeholders to implement security controls and remediation steps.
• Stay up-to-date with the latest threat intelligence, vulnerabilities, and attack methodologies.
• Participate in on-call rotations as required.

Connaissances

SIEM utilization

EDR

Incident response

Threat hunting

Analytical thinking

Clear documentation

Communication skills

Scripting (Python, PowerShell)

Formation

Bachelor's degree in Cybersecurity / CS / IT

Outils

Splunk

QRadar

ELK Stack

EDR solutions

Description du poste

About the Role

Our client, a leading technology services firm, is seeking a skilled Security Analyst to join their Security Operations Center (SOC) as a Tier 2 analyst. This role is primarily responsible for investigating and responding to security alerts escalated from Tier 1 analysts, performing in-depth analysis of security events, and contributing to threat hunting activities. You will work with a variety of security tools, including SIEM, IDS/IPS, and endpoint detection systems, to identify and mitigate cyber threats. The ideal candidate possesses strong analytical skills, a solid understanding of cybersecurity principles, and the ability to work effectively in a fast-paced, often high-pressure environment. This position offers a fantastic opportunity for professional growth within a dedicated cybersecurity team, with the flexibility of remote work.

Key Responsibilities

• Analyze security alerts escalated from SOC Tier 1, performing in-depth investigations.
• Identify, investigate, and respond to security incidents across the organization's network and systems.
• Utilize SIEM, IDS/IPS, EDR, and other security tools to detect and analyze threats.
• Perform threat hunting to proactively identify malicious activity that may have bypassed existing controls.
• Document investigation findings, incident details, and remediation actions in a clear and concise manner.
• Develop and refine detection rules and use cases for the SIEM platform.
• Contribute to the creation and improvement of incident response playbooks and procedures.
• Collaborate with other IT teams and stakeholders to implement security controls and remediation steps.
• Stay up-to-date with the latest threat intelligence, vulnerabilities, and attack methodologies.
• Participate in on-call rotations as required.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field; relevant experience may substitute.
• Minimum of 3 years of experience in a SOC environment (Tier 1 or Tier 2), incident response, or security analysis role.
• Strong understanding of networking protocols (TCP/IP, DNS, HTTP), operating systems (Windows, Linux), and common security threats.
• Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, ELK Stack) and EDR solutions.
• Familiarity with incident response methodologies and digital forensics concepts.
• Excellent analytical and problem-solving skills with a keen attention to detail.
• Strong written and verbal communication skills, capable of clear documentation and reporting.
• Ability to work effectively under pressure and manage multiple priorities.
• Relevant certifications such as CompTIA Security+, CySA+, GSEC, or GCIA are highly desirable.
• Experience with scripting languages (e.g., Python, PowerShell) is a plus.

Benefits

• Competitive salary and remote work flexibility.
• Comprehensive health, dental, and vision insurance.
• Retirement savings plan options.
• Opportunities for professional growth, certifications, and advanced training.
• Work with a team of dedicated cybersecurity professionals in East London, Eastern Cape.
• Exposure to a wide range of security technologies and challenging security scenarios.
• Supportive and collaborative work culture.
• Generous annual leave and paid holidays.
• Home office setup allowance.
• Regular virtual team meetings and knowledge-sharing sessions.