Security Operations Analyst

Claritev; United States; On-site; USD 95,000 - 105,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Bonus opportunity

Job summary

Claritev is seeking a seasoned SOC Analyst to monitor, detect, and respond to cybersecurity threats across the enterprise. You will analyze security alerts, conduct incident investigations, escalate events, and coordinate with IT, cloud, and application teams to protect assets.

This role emphasizes threat hunting, use case development from threat intel, and maintaining security operations through SIEM, EDR, and cloud tools.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, Computer Science, or related field.
• 3+ years in cybersecurity, information security, IT ops, or SOC (Level I/II).
• Experience investigating security alerts and incidents.
• Familiarity with SIEM platforms and security monitoring tools.
• Preferred: Splunk, CrowdStrike, MDR (Reliaquest), ServiceNow.

Responsibilities

• Monitor security events and alerts from SIEM, EDR, IDS/IPS, email, cloud security, and other tools.
• Analyze and triage alerts for legitimacy, severity, and impact.
• Identify IOCs, suspicious behavior, and emerging threats.
• Investigate incidents including malware, phishing, account compromises, insider threats.
• Coordinate containment, eradication, and recovery with stakeholders.
• Develop detection use cases from threat intel and incident trends.
• Support vulnerability management and security tool tuning.
• Maintain incident records and produce reports and SOPs.
• Collaborate with infrastructure, networking, cloud, and identity teams.

Skills

SIEM analysis

Incident response

Threat hunting

Threat intelligence

Vulnerability mgmt

Cloud security

IAM

Windows/Linux

On-call

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Splunk

CrowdStrike

ServiceNow

SOAR

Job description

Job Description

JOB SUMMARY:

The SOC Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organization's technology environment. This role serves as a frontline defender against cyber threats by analyzing security alerts, conducting incident investigations, and escalating security events as appropriate. The analyst works closely with IT, infrastructure, cloud, and application teams to protect organizational assets, maintain security monitoring capabilities, and strengthen the overall security posture.

Job Roles And Responsibilities

Security Monitoring & Detection

• Monitor security events and alerts generated by SIEM, EDR, IDS/IPS, email security, cloud security, and other security tools.
• Analyze and triage security alerts to determine legitimacy, severity, and business impact.
• Identify indicators of compromise (IOCs), suspicious behavior, and emerging threats.
• Perform continuous threat monitoring and situational awareness activities.

Incident Response

• Investigate cybersecurity incidents including malware infections, phishing attacks, account compromises, insider threats, and unauthorized access attempts.
• Execute incident response procedures and playbooks.
• Document findings, actions taken, and lessons learned.
• Coordinate containment, eradication, and recovery activities with appropriate stakeholders.
• Escalate significant incidents according to established procedures.

Threat Hunting & Intelligence

• Utilize threat intelligence feeds to enrich investigations.
• Research emerging threats, vulnerabilities, and attack techniques.
• Develop and refine detection use cases based on threat intelligence and incident trends.

Security Operations

• Support vulnerability management efforts by validating findings and tracking remediation.
• Assist with security tool administration and tuning.
• Review and improve alerting logic to reduce false positives.
• Participate in security assessments and operational readiness activities.
• Support audit and compliance initiatives as required.
• And other duties as assigned.

Documentation & Reporting

• Maintain accurate incident records, investigation notes, and operational metrics.
• Prepare reports on security incidents, trends, and findings.
• Contribute to development and maintenance of standard operating procedures (SOPs).
• Provide security recommendations to business and technical stakeholders.

Collaboration

• Work closely with infrastructure, networking, cloud, and identity teams.
• Participate in on-call rotations and after-hours incident response activities when required.
• Support user awareness efforts through identification of phishing and social engineering trends.

REQUIREMENTS (Education, Experience, And Training)

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or related field; or equivalent combination of education and experience.
• 3+ years of cybersecurity, information security, IT operations, or SOC experience (Level I/II).
• Experience investigating security alerts and incidents.
• Familiarity with SIEM platforms and security monitoring tools.
• (Preferred) Security Information and Event Management (SIEM) platforms (Splunk)
• (Preferred) Endpoint Detection and Response (EDR) solutions (Crowdstrike)
• (Preferred) Reliaquest managed detection and response (MDR) and Servicenow experience
• Microsoft 365 and Azure security technologies.
• Network security concepts and protocols.
• Identity and Access Management (IAM).
• Windows, Linux, and cloud environments.
• MITRE ATT&CK framework.
• Incident response methodologies.
• Strong troubleshooting and investigative abilities.
• Ability to prioritize multiple security events in a fast‑paced environment.
• Excellent attention to detail.
• Strong written and verbal communication skills.

Preferred Qualifications

• CompTIA Security+
• CompTIA CySA+
• GIAC Certified Incident Handler (GCIH)
• GIAC Security Essentials (GSEC)
• SSCP
• Certified Ethical Hacker (CEH)
• SC-200 Security Operations Analyst
• CISSP
• Experience with Splunk, Microsoft core infrastructure technologies (Entra/Active Directory, Sharepoint, Copilot, etc.), CrowdStrike, or similar platforms.
• Experience with SOAR and security automation technologies.
• Exposure to cloud security platforms (Azure, AWS, GCP).
• Knowledge of NIST Cybersecurity Framework and incident response best practices.

Compensation

The salary range for this position is $95K -105K. Specific offers take into account a candidate's education, experience and skills, as well as the candidate's work location and internal equity. This position is also eligible for health insurance, 401k and bonus opportunity.

About Us

Why Claritev ?

Healthcare is complex. We help make it clearer.

At Claritev , you'll do work that matters. Together, we're helping make healthcare more transparent and affordable for all through the power of data, technology, and expertise . We offer meaningful opportunities to grow your career, collaborate with talented colleagues, and make an impact on the clients and communities we serve. If you're looking for purpose, growth, and a team that succeeds together, you'll find it here.

What Guides Us

At Claritev , innovation, agility, and a focus on results drive our success. We embrace bold thinking, work as one team, take ownership, and strive for excellence in everything we do - creating meaningful impact for our clients, communities, and each other.

About The Team

My Total Value

Claritev's Global t Otal r Ewards Philosophy — My Total Value — Is Grounded In Investing In Our Associates And Rewarding Per Formance. This Includes

• Competitive compensation and incentive opportunities (where eligible)
• Medical, d ental, and v ision coverage
• Life and d isability coverage
• 401(k) with c ompany m atch
• Employee s tock p urchase p lan
• Flexible s pending a ccounts and h ealth s avings a ccounts
• Paid t ime o ff and c ompany h olidays
• Paid p arental l eave
• Mental h ealth r e sources
• Tuitio n r eimbursement
• Financial p lanning r esources
• Professional development opportunities

Our Commitment to Inclusion

At Claritev , we believe diverse perspectives strengthen our teams and lead to better outcomes. We are committed to fostering an inclusive workplace where every associate feels respected, valued, and empowered to succeed.

Claritev is an Equal Opportunity Employer and complies with all applicable laws and regulations. Qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by law.