Security Operations Center Analyst

Yorkshire Global Solutions Inc.; United States; À distance; USD 120 000 - 180 000; Plein temps

Résumé du poste

Yorkshire Global Solutions Inc. is seeking a Senior SOC Analyst for a remote, contract-W2 role in the United States.

The candidate will lead security operations, monitor SIEM platforms, and drive complex incident investigations across enterprise environments. The ideal candidate has 10+ years in SOC operations, hands-on SIEM experience (Splunk ES, IBM QRadar, Microsoft Sentinel), and strong knowledge of threat hunting, MITRE ATT&CK, and NIST frameworks.

Qualifications

• 10+ years of experience in Security Operations Center (SOC) operations, security monitoring, and incident investigation.
• Strong hands-on experience with SIEM tools such as Splunk Enterprise Security, IBM QRadar, or Microsoft Sentinel.
• Expertise in security event monitoring, alert triage, correlation, and investigation.
• Strong experience in incident detection, investigation, escalation, and response.
• Experience analyzing Windows, Linux, firewall, endpoint, and network security logs.
• Hands-on experience with EDR tools such as CrowdStrike Falcon or Microsoft Defender.
• Strong knowledge of threat intelligence, threat hunting, malware detection, and phishing investigations.
• Experience identifying suspicious activities, unauthorized access, and advanced persistent threats (APT).
• Understanding of MITRE ATT&CK framework, NIST, and SOC incident response procedures.
• Strong knowledge of network security concepts, including TCP/IP, DNS, VPN, IDS, and IPS.
• Experience with security incident documentation, investigation reports, and threat analysis.
• Strong analytical, troubleshooting, and communication skills.

Responsabilités

• Monitor and analyze security events across enterprise environments using SIEM platforms.
• Investigate complex security alerts, suspicious activities, and potential cyberattacks.
• Perform advanced alert triage, threat analysis, and incident investigations.
• Identify security breaches, malware infections, phishing attacks, and unauthorized access.
• Conduct threat hunting to identify hidden and emerging security threats.
• Analyze logs from endpoints, servers, firewalls, and network devices.
• Coordinate incident containment, remediation, escalation, and recovery activities.
• Correlate security events and identify attack patterns using threat intelligence.
• Maintain detailed incident documentation and prepare security investigation reports.
• Improve SOC monitoring processes, detection rules, and incident response procedures.
• Collaborate with SOC teams, security engineers, and IT infrastructure teams to strengthen enterprise security.

Connaissances

SOC operations

SIEM expertise

Incident response

Threat hunting

Log monitoring

Threat investigation

APTs & malware

MITRE ATT&CK

NIST framework

Network security

Outils

Splunk Enterprise Security

IBM QRadar

Microsoft Sentinel

CrowdStrike Falcon

Microsoft Defender

Description du poste

Note: This is a W2 role only. Please do not apply if you are looking for 1099/C2C.

Job Title

Senior SOC (Security Operations Center) Analyst :: (W2 Only)

Location

Remote

Job Type

Contract- W2

Experience Level

10+ Years

Job Description

We are looking for an experienced Senior SOC (Security Operations Center) Analyst with 10+ years of hands-on experience in Security Operations Center operations, security monitoring, threat detection, and incident response. The ideal candidate should have strong expertise in SIEM platforms, security event analysis, log monitoring, threat investigation, and handling complex cybersecurity incidents.

Required Skills

• 10+ years of experience in Security Operations Center (SOC) operations, security monitoring, and incident investigation.
• Strong hands-on experience with SIEM tools such as Splunk Enterprise Security, IBM QRadar, or Microsoft Sentinel.
• Expertise in security event monitoring, alert triage, correlation, and investigation.
• Strong experience in incident detection, investigation, escalation, and response.
• Experience analyzing Windows, Linux, firewall, endpoint, and network security logs.
• Hands-on experience with EDR tools such as CrowdStrike Falcon or Microsoft Defender.
• Strong knowledge of threat intelligence, threat hunting, malware detection, and phishing investigations.
• Experience identifying suspicious activities, unauthorized access, and advanced persistent threats (APT).
• Understanding of MITRE ATT&CK framework, NIST, and SOC incident response procedures.
• Strong knowledge of network security concepts, including TCP/IP, DNS, VPN, IDS, and IPS.
• Experience with security incident documentation, investigation reports, and threat analysis.
• Strong analytical, troubleshooting, and communication skills.

Key Responsibilities

• Monitor and analyze security events across enterprise environments using SIEM platforms.
• Investigate complex security alerts, suspicious activities, and potential cyberattacks.
• Perform advanced alert triage, threat analysis, and incident investigations.
• Identify security breaches, malware infections, phishing attacks, and unauthorized access.
• Conduct threat hunting to identify hidden and emerging security threats.
• Analyze logs from endpoints, servers, firewalls, and network devices.
• Coordinate incident containment, remediation, escalation, and recovery activities.
• Correlate security events and identify attack patterns using threat intelligence.
• Maintain detailed incident documentation and prepare security investigation reports.
• Improve SOC monitoring processes, detection rules, and incident response procedures.
• Collaborate with SOC teams, security engineers, and IT infrastructure teams to strengthen enterprise security.