Senior SOC Analyst: Threat Detection & Incident Response

BDO USA; Chicago (IL); On-site; USD 60,000 - 95,000; Full time

Job summary

BDO USA is seeking a SOC Engineer to join the Cyber team as an escalation responder for security events within the Security Operations Center. The role emphasizes problem solving, analytics, and threat response, with responsibilities spanning monitoring, incident handling, and postmortem analysis.

The candidate will maintain knowledge of the threat landscape, help enhance capabilities, and support new detection methods. On-call rotation and cross-team collaboration are expected.

Qualifications

• 3+ years in information security, cybersecurity, systems or networking.
• 2+ years with cloud technologies (Azure/AWS).
• 2+ years with EDR or SIEM platforms.
• Experience with ticketing systems and service desk tools.
• 3+ years in networking protocols, configurations or IT operations.

Responsibilities

• Monitor security event platforms and follow incident playbooks for first response, triage, and postmortem activities.
• Conduct network monitoring and IDS/IPS analysis using firewalls, HBSS, Azure security, and log management.
• Provide proactive feedback to improve monitoring rules based on experience.
• Create daily, weekly, and monthly reports for Security Management Team.
• Perform front line response and escalation tasks and update runbooks as needed.
• Compile statistics and contribute to playbook improvements.
• Stay up to date with threats using public security resources.
• Participate in on-call rotation.

Skills

Cybersecurity

Networking

Cloud platforms

EDR/SIEM tools

Windows/Linux basics

Education

High School Diploma or GED

Bachelor’s Degree in IT/Cybersecurity/CS

Tools

Microsoft Sentinel

HBSS

IDS/IPS

Wireshark

Azure

Job description

BDO USA is seeking a SOC Engineer to join the Cyber team as an escalation responder for security events within the Security Operations Center. The role emphasizes problem solving, analytics, and threat response, with responsibilities spanning monitoring, incident handling, and postmortem analysis.

The candidate will maintain knowledge of the threat landscape, help enhance capabilities, and support new detection methods. On-call rotation and cross-team collaboration are expected.