Security Operations Analyst: Incident Response & SOC

Thomson Reuters Corp.; Eagan (MN); Hybrid; USD 71,000 - 131,000; Full time

Job summary

Thomson Reuters in Eagan, MN is seeking a Security Operations Analyst to join our global SOC. You will monitor, analyze, and respond to cybersecurity alerts across a large enterprise and coordinate with ISRM teams to improve detection and response.

The role emphasizes incident handling, writing clear briefs, maintaining SOC procedures, and producing handoff reports. A background in cybersecurity or related field and hands-on experience with SIEM/EDR, cloud security, and networks are required.

Qualifications

• Background or degree in cybersecurity, computer science, or related field
• Hands-on experience investigating security events across operating systems, networks, cloud environments, and messaging platforms
• Familiarity with security tooling such as SIEM, EDR, antivirus, firewalls, forensics, and cloud security solutions
• A solid understanding of common attack techniques and defensive response strategies
• Working knowledge of networking, operating systems, servers, and endpoints

Responsibilities

• Perform continuous security monitoring and incident response for a global enterprise environment
• Respond to, analyze, and triage alerts from security technologies, including IDS and SIEM platforms
• Communicate security alerts and investigation findings to internal teams regarding potential intrusions or compromises
• Collaborate with other ISRM teams to provide feedback that improves detection coverage and alert quality
• Prepare clear briefings and written reports documenting analysis methodology and results
• Create and maintain standard operating procedures and other SOC documentation
• Produce end-of-shift reports to ensure effective handoff and continuity between analysts
• Maintain accurate records of monitoring and response activities using case management and ticketing systems

Skills

SOC experience

Incident response

SIEM

EDR

Cloud security

Networking

Operating systems

Forensics

Attack techniques

Defensive strategy

Education

Cybersecurity or CS degree

Tools

Antivirus software

Firewalls

Forensics tools

Cloud security tools

Job description

Thomson Reuters in Eagan, MN is seeking a Security Operations Analyst to join our global SOC. You will monitor, analyze, and respond to cybersecurity alerts across a large enterprise and coordinate with ISRM teams to improve detection and response.

The role emphasizes incident handling, writing clear briefs, maintaining SOC procedures, and producing handoff reports. A background in cybersecurity or related field and hands-on experience with SIEM/EDR, cloud security, and networks are required.