Senior SOC Engineer - Level 2 | Remote Incident Response

CTS; United States; Remote; USD 80,000 - 85,000; Full time

Benefits offered by this job

Health Insurance

401(k) match

Paid Time Off

HSA

EAP

Commuter Benefits

Disability Insurance

Parental Leave

Job summary

CTS is seeking an experienced Level 2 SOC Engineer to join our Security Operations Center. You will monitor, analyze, and respond to security incidents, guiding Level 1 engineers and strengthening our security posture in a fast-paced environment.

The role requires strong technical expertise, hands-on experience with SIEM/IDS/IPS, and the ability to mentor junior staff. This full-time remote position follows EST hours and offers comprehensive benefits.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experience.
• 3–5 years in a SOC or cybersecurity role, with 1–2 years at Level 2 or equivalent.
• Relevant certifications such as CompTIA Security+ or CySA+ are preferred.

Responsibilities

• Monitor and analyze security alerts and incidents, and respond to complex threats.
• Lead security incidents, coordinate with IT and security teams to contain and recover.
• Perform forensic analysis to identify root causes and IOC.
• Maintain and optimize security tools (SIEM, IDS/IPS, firewalls).
• Document security incidents and responses, ensuring policy compliance.
• Generate security reports and provide improvement recommendations.

Skills

Security monitoring

Network security

Forensic analysis

Scripting (Python, PowerShell)

Cloud security

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

SIEM

IDS/IPS

Firewalls

Endpoint protection

Job description

CTS is seeking an experienced Level 2 SOC Engineer to join our Security Operations Center. You will monitor, analyze, and respond to security incidents, guiding Level 1 engineers and strengthening our security posture in a fast-paced environment.

The role requires strong technical expertise, hands-on experience with SIEM/IDS/IPS, and the ability to mentor junior staff. This full-time remote position follows EST hours and offers comprehensive benefits.