SOC Analyst

StarsHR, Inc.; Harrisburg (Dauphin County); On-site; USD 70,000 - 110,000; Full time

Job summary

StarsHR, Inc. is seeking a security operations professional for on-site information security and network monitoring of mission-critical sites and systems.

You will respond proactively to incidents and ensure thorough documentation of events. You will analyze logs, captures, and endpoint telemetry to identify threats, investigate escalated alerts in the SOC, and continually tune detection rules to improve fidelity.

Qualifications

• Experience with security monitoring and incident response.
• Familiarity with SOC playbooks and SOPs.
• Ability to document security incidents clearly and accurately.
• Knowledge of logs, network captures, and endpoint telemetry.

Responsibilities

• On-site security monitoring and proactive incident response for mission-critical systems.
• Capture and log events from email, chat, and telecom, documenting data accurately.
• Investigate alerts escalated in the SOC to determine scope and impact.
• Follow and improve SOC playbooks and SOPs.
• Document security incidents and related information.
• Analyze logs, network captures, and endpoint telemetry to identify IOCs.
• Conduct initial threat hunting to identify anomalies.
• Tune detection rules to reduce false positives.
• Participate in root cause analysis or lessons learned.
• Monitor external sources for security intelligence and actionable incidents.

Job description

Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems.

Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems, ensuring accurate documentation of incoming data.

Perform security investigation for alerts escalated within the Security Operation Center, determining full scope, potential root cause, and potential impact.

Follow, create, and improve established playbooks and SOPs used by the SOC.

Document security incidents, responses, and related information in accordance with established procedures

Analyze advanced logs, network capture, end-point telemetry to identify malicious activity and indicators of compromise (IOCs)

Conduct initial threat hunting to proactively identify security anomalies and adversary activity

Conduct tuning and optimization of existing detection rules, alerts, and correlation logic to reduce false positives and improve detection fidelity.

Participate in root cause analysis or lessons learned sessions.

Monitor external event sources for security intelligence and actionable incidents