Senior Security Analyst – AI SOC

EthicalHat Cyber Security Pvt. Ltd.; United States; Remote; USD 80,000 - 140,000; Full time

Job summary

EthicalHat Cyber Security Pvt. Ltd. in the United States is seeking a SOC Analyst to investigate escalated security alerts and incidents. You will validate AI-assisted triage, correlate events, and guide containment efforts.

The role requires hands-on SIEM/EDR experience, knowledge of MITRE ATT&CK, and the ability to document findings clearly. You will mentor L1 analysts and contribute to client reports in a 24x7 environment.

Qualifications

• 3–5 years in SOC analysis, incident response, or threat analysis.
• Hands-on experience with a SIEM and an EDR platform.
• Good knowledge of attacker techniques mapped to MITRE ATT&CK.
• Solid understanding of Windows, Linux, networking, and at least one cloud platform.
• Clear, accurate documentation and communication skills.
• Bachelor's degree in computer science or information systems, or equivalent experience.

Responsibilities

• Investigate alerts across SIEM, EDR/XDR, email, identity, and cloud telemetry.
• Validate AI-generated triage decisions and investigation summaries, reporting errors for improvement.
• Scope incidents, recommend containment steps, and communicate clearly with clients.
• Analyze malware and phishing attempts to identify indicators of compromise.
• Correlate activity across systems and hunt for related events.
• Improve detection rules, tuning, and investigation playbooks.
• Mentor L1 analysts, review their work, and prepare client incident reports.

Skills

SOC analysis

Incident response

Threat analysis

MITRE ATT&CK

Windows

Linux

Networking

Cloud platforms

Documentation

Communication

24x7 shifts

Education

Bachelor's degree in computer science or information systems

Tools

SIEM

EDR platform

Job description

Role overview

Investigate escalated security alerts and incidents in a SOC where AI agents handle much of the initial enrichment and event correlation. You will validate agent findings, investigate unresolved activity, communicate response guidance, and help improve detections and automation.

Responsibilities

• Investigate alerts across SIEM, EDR/XDR, email, identity, and cloud telemetry.


• Validate AI-generated triage decisions and investigation summaries, reporting errors for improvement.


• Scope incidents, recommend containment steps, and communicate clearly with clients.


• Analyze malware and phishing attempts to identify indicators of compromise.


• Correlate activity across systems and hunt for related events.


• Improve detection rules, tuning, and investigation playbooks.


• Mentor L1 analysts, review their work, and prepare client incident reports.

Requirements

• 3–5 years in SOC analysis, incident response, or threat analysis.


• Hands‑on experience with a SIEM and an EDR platform.


• Good knowledge of attacker techniques mapped to MITRE ATT&CK.


• Solid understanding of Windows, Linux, networking, and at least one cloud platform.


• Clear, accurate documentation and communication skills.


• Bachelor's degree in computer science or information systems, or equivalent experience.


• Willingness to work rotational shifts in a 24×7 environment.