Security Operations Center (SOC) Analyst

Mbi Llc; Dover (DE); Hybrid; USD 70,000 - 110,000; Full time

Job summary

Mbi Llc in Dover, DE seeks a Security Operations Center (SOC) Analyst to monitor networks, detect incidents, and respond to threats. You will analyze logs from firewalls, endpoints, and IDS/IPS, and collaborate with IT to contain and remediate security events.

The role requires hands-on proficiency with SIEM and EDR tools, scripting with Python or PowerShell, and the ability to develop detection rules. A Bachelor's in a related field and Security+ certification are beneficial.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience in a security-related role with a strong understanding of cybersecurity principles and technologies.
• CompTIA Security+ or equivalent certification is beneficial.

Responsibilities

• Security Monitoring: Continuously monitor network traffic, system logs, and other security tools to detect incidents or vulnerabilities.
• Incident Detection and Response: Identify and categorize security incidents; contain, mitigate, and resolve incidents.
• Alert Triage: Assess alerts; determine severity and prioritize responses.
• Threat Intelligence and Hunting: Stay updated on threats and attack techniques; conduct proactive hunting across SIEM and EDR.
• Log Analysis: Examine logs from firewalls, IDS/IPS, antivirus, and endpoints to identify irregularities.
• Security Tool Management: Operate and manage SIEM, IDS/IPS, firewalls, PKI, and endpoint security solutions.
• Documentation and Compliance: Maintain records of security incidents and ensure regulatory/compliance standards.
• Collaboration: Work with security and IT teams to investigate and resolve issues.
• Continuous Improvement: Refine security processes and develop detection/prevention rules.

Skills

IT fundamentals

Security tools

SIEM

PowerShell

Python

Forensics basics

Log analysis

Incident response

Threat intelligence

Communication

Problem solving

Adaptability

Education

Bachelor's degree in CS/IT/Cybersecurity

Experience in security role

CompTIA Security+ or equivalent

Tools

SIEM systems

IDS/IPS

Firewalls

Antivirus

EDR

PKI management

Endpoint security

Job description

Security Operations Center (SOC) Analyst

• 11-Sep-2026 to 25-Sep-2026 (UTC)
• Dover, DE, USA
• Full Time
• 40 Weekly Hours

Key Responsibilities

• Security Monitoring: Continuously monitor network traffic, system logs, and other security tools to detect unusual or suspicious activities that could indicate an incident or vulnerability.
• Incident Detection and Response: Identify and categorize security incidents such as malware infections, data breaches, and insider threats. Respond swiftly to contain, mitigate, and resolve incidents.
• Alert Triage: Assess alerts generated by security tools, determine their severity, and prioritize responses accordingly.
• Threat Intelligence and Hunting: Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques to enhance monitoring and response efforts. Leverage these findings to conduct proactive threat hunting across SIEM and EDR platforms.
• Log Analysis: Examine logs from a range of sources including firewalls, intrusion detection systems, antivirus software, and system endpoints to identify irregularities that may signal a threat.
• Security Tool Management: Operate and manage security technologies such as SIEM systems, IDS/IPS, firewalls, PKI management, and endpoint security solutions.
• Documentation and Compliance: Maintain accurate records of security incidents and ensure compliance with industry standards and regulations.
• Collaboration: Work closely with other security and IT professionals to investigate and resolve security issues.
• Continuous Improvement: Contribute to refining security processes and developing new detection and prevention rules.

Required Skills

• Technical Proficiency: Strong understanding of IT basics, including operating systems, network protocols, and security tools.
• Hands-on Experience with Security Tools: Proficiency in using SIEM systems, IDS/IPS, firewalls, antivirus, and endpoint detection tools.
• Coding Skills: Knowledge of programming languages like Python or PowerShell for automating tasks and creating scripts.
• Forensics Knowledge: Basic understanding of computer forensics for incident investigation.
• Log Analysis: Ability to analyze logs to spot patterns and anomalies.
• Incident Response: Experience in responding to security incidents effectively.
• Threat Intelligence: Understanding of attack patterns and tactics used by cybercriminals.
• Communication: Excellent communication skills for reporting and collaboration.
• Problem-Solving: Strong analytical and problem-solving abilities.
• Adaptability: Ability to adapt quickly to evolving cyber threats.

Qualifications

• Education: Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience: Previous experience in a security-related role with a strong understanding of cybersecurity principles and technologies.
• Certifications: Relevant certifications such as CompTIA Security+ or equivalent are beneficial.