Senior SOC Investigator - AI-Driven Security & Analytics

Mercor; United States; Remote; USD 95,000 - 125,000; Full time

Job summary

Mercor is hiring a SOC Investigation Specialist to join our security operations team in the United States. The role focuses on reviewing alerts, validating evidence, and performing end-to-end investigations across SIEM, endpoint, cloud, and identity environments using Splunk.

Qualified candidates will have 3+ years of hands-on SOC experience, strong investigative judgment, and excellent English communication skills to document findings and collaborate with cross-functional teams.

Qualifications

• 3+ years hands-on experience as a SOC analyst in a production SOC environment.
• Strong understanding of alert triage and incident investigations under time constraints.
• Hands-on Splunk experience with investigations and SPL query analysis.
• Ability to evaluate SOC investigations and make decisive evaluations.
• Fluent English, written and spoken, with strong documentation skills.

Responsibilities

• Review, monitor, and evaluate SOC alerts and investigation outputs.
• Distinguish true positives from false positives by validating evidence.
• Perform end-to-end security investigations including log analysis and timeline reconstruction.
• Assess correctness and quality of investigations from automated or human workflows.
• Maintain documentation of steps, assumptions, evidence, and conclusions.
• Collaborate with program leads and annotators to uphold quality; mentor others where applicable.

Skills

SOC analysis

Alert triage

Incident investigation

Documentation

English fluency

Tools

Splunk

SPL queries

CrowdStrike Falcon

Microsoft Defender for Endpoint

SentinelOne

Okta Identity Cloud

Job description

Mercor is hiring a SOC Investigation Specialist to join our security operations team in the United States. The role focuses on reviewing alerts, validating evidence, and performing end-to-end investigations across SIEM, endpoint, cloud, and identity environments using Splunk.

Qualified candidates will have 3+ years of hands-on SOC experience, strong investigative judgment, and excellent English communication skills to document findings and collaborate with cross-functional teams.