Security Incident Lead — 24/7 SOC

Avnet; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Avnet is seeking a Security Analyst II to investigate and respond to complex cybersecurity events within a 24/7 Security Operations Centre in the United States. The role includes guiding junior analysts, coordinating containment actions, and documenting investigations for cross-functional teams.

The ideal candidate brings 3+ years in security operations, strong English communication, and experience across phishing, malware, account compromise, and data exposure scenarios.

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity or related field.
• 3+ years of experience in security operations, incident response, or threat detection.
• Strong written and spoken English communication skills.
• Experience working in a 24x7 Security Operations Centre or similar environment.
• AZ-500, CySA+, GSOC, or GCIA certifications are a plus.

Responsibilities

• Monitor and respond to security events in a 24x7 SOC environment.
• Lead investigations and responses to high-impact or complex incidents.
• Document findings and produce detailed incident reports.
• Serve as on-shift escalation point for junior analysts.
• Coordinate containment, remediation, and recovery actions with stakeholders.
• Provide structured handovers between shifts and maintain case ownership.
• Contribute to security playbooks, procedures, and incident response plans.

Skills

Incident response

Security operations

Analytical thinking

English communication

Threat hunting

Education

Bachelor's degree in cybersecurity or related field

Tools

EDR

SIEM

NDR

Forensic tools

Job description

Avnet is seeking a Security Analyst II to investigate and respond to complex cybersecurity events within a 24/7 Security Operations Centre in the United States. The role includes guiding junior analysts, coordinating containment actions, and documenting investigations for cross-functional teams.

The ideal candidate brings 3+ years in security operations, strong English communication, and experience across phishing, malware, account compromise, and data exposure scenarios.