Security Operations

Velocity Technologies; Phoenix (AZ); Hybrid; USD 71,000 - 126,000; Full time

Job summary

Velocity Technologies is seeking a SOC Analyst to review security signals, investigate alerts, and enhance detection quality. This role is hybrid, based in Phoenix/East Valley, AZ, and requires strong communication and documentation skills.

The successful candidate will engage with various IT security tools, including Microsoft 365, and work closely with service desk teams to manage client security effectively. Competitive salary of $71k-$126k is offered.

Qualifications

• Experience with incident response and alert triage.
• Knowledge of endpoint protection and logging.
• Familiarity with backup/DR considerations.

Responsibilities

• Triage security alerts from various sources.
• Investigate suspicious sign-ins and incidents.
• Document incident timelines and follow-up steps.
• Collaborate with other teams for remediation.

Skills

Security alert triage experience

Understanding of Microsoft 365

Strong documentation habits

Communication of risk

Education

Security+

CySA+

Microsoft Security Operations Analyst

Network+

Tools

Microsoft Defender

SIEM tools

Job description

# SOC AnalystThe SOC Analyst reviews security signals across managed environments, investigates endpoint and identity alerts, improves detection quality, supports incident response, and documents practical client security improvements.Apply for this role Back to careersSalary: $71k-$126kLocation: Phoenix/East Valley, AZWork mode: HybridEmployment: Full-timeSeniority: MidReports to: Security Operations LeadPosted: 2026-05-16Role scope## What this role owns.Help protect local clients through alert triage, endpoint review, identity signals, and practical incident readiness.Velocity work is grounded in local managed IT delivery: Microsoft 365, Active Directory, Entra ID, Intune, SonicWall/Fortinet/Ubiquiti, backups/DR, QBRs, ticket queues, onboarding, standards alignment, and white-glove support for Phoenix and East Valley businesses.## Responsibilities* Triage security alerts from endpoint, identity, email, Microsoft 365, firewall, and monitoring tools.* Investigate suspicious sign-ins, endpoint events, phishing reports, policy gaps, and backup/DR implications.* Document incident timelines, containment steps, evidence, and follow-up recommendations.* Partner with systems, NOC, and service desk teams on remediation and client communication.* Improve security runbooks, alert quality, and standards alignment across managed clients.## Must-have qualifications* Security alert triage experience with endpoint, identity, email, or cloud signals.* Understanding of Microsoft 365, Entra ID, MFA, endpoint protection, logging, and basic network security.* Strong documentation and evidence-handling habits.* Ability to communicate risk without exaggeration.## Nice-to-have experience* MSP or MSSP experience supporting multiple client environments.* Experience with Microsoft Defender, SIEM tools, phishing triage, firewall logs, and incident response.* Exposure to backup/DR considerations during security events.## Helpful certifications* Security+* CySA+* Microsoft Security Operations Analyst* Network+## Compensation and benefits$71k-$126k* Visible compensation band before interviews* Local Phoenix and East Valley client base* Documentation-driven MSP operating standards* Practical exposure to Microsoft 365, identity, network, backup, and security operations* Structured hiring process with role-specific expectationsInterview stages## How we evaluate fit.1. ### Recruiting screen2. ### Security technical interview3. ### Alert triage exercise4. ### Team conversationHiring scorecard## What good looks like.* Alert triage judgment* Identity and endpoint security basics* Incident documentation* Risk communicationScreening questions## Questions you will see in the application.1. How would you investigate a suspicious Microsoft 365 sign-in alert?2. What should be documented during a security incident timeline?3. How do you decide whether an alert requires client communication?## Remote, relocation, and visa expectationsUnless a role explicitly states otherwise, positions are intended for candidates currently authorized to work in the United States. Relocation assistance and visa sponsorship are not assumed and will only be offered where the job posting specifically says so.Application## Apply for SOC Analyst.