Security Operations Center Analyst

TechBiz Global GmbH; Newark (NJ); Remote; USD 80,000 - 120,000; Full time

Job summary

TechBiz Global is recruiting for a client to fill a Security Operations Center Analyst role in the United States. You will monitor security alerts, investigate incidents, and rapidly respond to threats across multiple environments.

Responsibilities include triaging detections with Microsoft Sentinel, M365 Defender, and Azure security products, developing KQL queries, documenting incidents, and collaborating in a fast-paced team. 3+ years in SOC and Security+ / SC-200 certifications are required.

Qualifications

• Minimum 3 years in a SOC or similar cybersecurity role.
• Hands-on experience with MS Sentinel, M365 Defender, and Azure security products.
• Proficient in incident response methodologies and security operations workflows.

Responsibilities

• Monitor, investigate, and triage security alerts across customer environments.
• Rapidly respond to active attacks and threats to reduce risk.
• Escalate incidents when determination is inconclusive.
• Develop, refine, and execute KQL queries.
• Document incidents, findings, and remediation steps clearly.
• Collaborate within a team-based SOC environment.

Skills

Security Operations

Incident Response

Team Collaboration

Communication

Education

Security+ Certification

Microsoft SC-200 Certification

Tools

Microsoft Sentinel

M365 Defender Suite

Azure Security Products

KQL (Kusto)

Job description

At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking an Security Operations Center Analyst specialist to join one of our clients' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.

Key Responsibilities:

• Monitor, investigate, and triage security alerts across multiple customer environments.
• Rapidly respond to active attacks and security threats to reduce organizational risk.
• Escalate incidents when a conclusive determination cannot be made (true threat or false positive).
• Utilize Microsoft Sentinel, M365 Defender, and Azure security products for threat detection, investigation, and response.
• Develop, refine, and execute Kusto Query Language (KQL) queries.
• Maintain awareness of cyberthreats, attack vectors, and industry best practices.
• Work collaboratively within a team-oriented SOC environment.
• Document incidents, findings, and remediation steps clearly and professionally.
• Participate in ongoing knowledge building, training, and process improvement efforts.

Requirements :

Experience & Skills:

• 3+ years of experience working in a Security Operations Center or similar cybersecurity role.
• Prior hands-on experience with:
  • Microsoft Sentinel
  • M365 Defender Suite
  • Azure Security Products
• Strong understanding of cyberattack vectors, incident response methodologies, and security operations workflows.
• Working knowledge of Kusto Query Language (KQL).
• Excellent verbal and written communication skills in English.
• Strong organizational skills, attention to detail, and ability to work in fast-paced environments.
• Previous experience working in collaborative, team-based environments.
• Comfortable appearing on camera for meetings, trainings, and client engagements.
• Stable high-speed internet connection suitable for VoIP communication and screen sharing.
• Ability to work from a home office within the United States.

Certifications:

• Security+ (required)
• Microsoft SC-200 (required)