Security Operations Center (SOC) Analyst / Engineer

Zoho; United States; On-site; USD 110,000 - 160,000; Part time

Job summary

Fyerx is seeking an experienced SOC Analyst/Engineer to monitor, detect, analyze, and respond to cyber threats across our global enterprise. You will orchestrate real-time security monitoring using SIEM/SOAR platforms, perform deep analysis of anomalous events, and implement rapid containment workflows to safeguard networks.

The ideal candidate has 4–7 years of IT security experience in a mature SOC, with certifications such as CISSP, Security+, CEH, or GCIH.

Qualifications

• 4–7 years of core IT security experience.
• 3+ years actively executing real-time threat detection and incident response in a mature SOC.
• Mandatory certification: Security+, CEH, GCIH, or CISSP.
• Deep understanding of network architecture, TCP/IP, common attack vectors, and OS security.

Responsibilities

• Monitor real-time security alerts across a multi-tenant infrastructure.
• Lead incident triage and analysis, prioritizing alerts based on risk and impact.
• Execute rapid threat containment workflows: isolate infected endpoints and revoke access tokens.
• Tune SIEM correlation rules to improve detection accuracy and reduce noise.
• Develop and automate SOAR playbooks to speed up incident response actions.
• Perform malware analysis and threat hunting; map findings to MITRE ATT&CK.
• Document post-incident reviews and remediation needs.

Skills

Threat detection

Incident response

SIEM

SOAR

Network security

Tools

Splunk

Microsoft Sentinel

Cortex XSOAR

Splunk SOAR

Job description

Security Operations Center (SOC) Analyst / Engineer

Security Operations Center (SOC) Analyst / Engineer

• Employment Type: Contract
  
• Work Mode: Remote
  
• Location: Offshore
  
• Total Experience Required: 4 to 7 years
  
• Relevant Experience Required: 3+ years of dedicated experience working within a 24/7 SOC environment running threat detection and incident response
  
• Mandatory Certification: Certified Information Systems Security Professional (CISSP), CompTIA Security+, CEH (Certified Ethical Hacker), or GIAC Certified Incident Handler (GCIH)
  

Job Summary

We are seeking an experienced SOC Analyst / Engineer to monitor, detect, analyze, and respond to cyber threats across our global enterprise infrastructure. The ideal candidate will orchestrate real-time security incident monitoring using advanced SIEM/SOAR platforms, perform deep technical analysis of anomalous events, and execute rapid containment workflows to safeguard business networks.

Key Responsibilities

• Monitor real-time enterprise security alerts across a multi-tenant infrastructure, parsing telemetry data from SIEM, EDR, firewalls, network sensors, and cloud logs.
  
• Lead incident triage and analysis tracks, investigating anomalous events, identifying true positives, and prioritizing security alerts based on risk and operational impact.
  
• Execute rapid threat containment workflows, neutralizing live compromises, isolating infected endpoints, disabling compromised accounts, and revoking unauthorized access tokens.
  
• Configure and tune SIEM correlation rules (e.g., Splunk , Microsoft Sentinel ) to enhance detection accuracy and systematically eliminate noise and false positives.
  
• Develop and automate SOAR playbooks (e.g., Palo Alto Cortex XSOAR , Splunk SOAR ) to streamline recurring incident response actions and shorten mean time to remediate (MTTR).
  
• Perform detailed malware analysis and threat hunting sweeps, evaluating suspicious files, malicious scripts, phishing vectors, and indicators of compromise (IOCs).
  
• Document and report post-incident reviews, mapping threat behaviors directly to the MITRE ATT&CK framework, identifying detection gaps, and tracking infrastructure remediation needs.
  

Requirements

• 4 to 7 years of core IT systems security experience, with 3+ dedicated years actively executing real-time threat detection and incident response in a mature SOC.
  
• Deep structural understanding of network architecture, TCP/IP protocols, common attack vectors, application vulnerabilities, and modern operating system security.
  
• Mandatory certification: Security+, CEH, GCIH, or CISSP.
  

Preferred Qualifications

• Prior experience writing detection rules using KQL, YARA, or Sigma formatting rules.
  
• Familiarity with scripting languages (Python, PowerShell) to extend custom security tool automations and log parsing logic.