SOC Analyst

BDO USA; Oak Brook (IL); On-site; USD 75,000 - 95,000; Full time

Job summary

BDO USA in Oak Brook, IL is seeking a SOC Analyst to join the Managed Services team. The candidate acts as the primary responder to security events, performs initial incident analysis, and advises on containment and remediation actions.

The role emphasizes monitoring, threat detection improvements, and reporting to Security Management. The ideal candidate has 2+ years in cloud technologies (Azure/AWS), strong networking knowledge, and familiarity with SIEM/EDR tools.

Qualifications

• High School Diploma or GED required.
• Bachelor’s degree in Cybersecurity, IT, or Computer Science preferred.
• 2+ years of cloud tech experience (Azure, Azure Stack, Azure Backups, AWS) required.
• 1+ years experience with network protocols/configs/operations.
• 1+ years experience in infosec, cybersecurity, systems, or networking.
• Experience with EDR or SIEM preferred.
• Experience with help desk ticketing systems preferred.

Responsibilities

• Monitor security event platforms and follow incident playbooks for first response and triage.
• Conduct network monitoring and intrusion detection analysis using IDS/IPS, firewalls, and related tools.
• Provide proactive feedback to improve monitoring rules and runbooks.
• Create daily, weekly, and monthly reports for Security Management.
• Perform front line response and escalation, updating procedures as needed.
• Contribute to playbooks and statistics to improve security operations.
• Stay updated with threat landscape using public security resources.
• Participate in on-call rotation and other duties as required.

Skills

Azure

AWS

SIEM

EDR

Network protocols

Windows

Linux

Troubleshooting

Forensics

Education

High School Diploma or GED

Bachelor’s Degree in Cybersecurity, IT, or CS (preferred)

Tools

Microsoft Sentinel

Wireshark

IDS/IPS

HBSS

Job description

Job Summary:

The SOC Analyst is part of the Managed Services team and serves as the primary responder to security events within the Security Operations Center. The ideal candidate would have strong problem-solving skills and analytics aptitude. This role participates in security posture monitoring and threat response activities and is directly responsible for troubleshooting security events. This position provides the initial analysis during security incidents, establishing the extent of the threat, business impacts, and then advising and performing the most suitable course of action to contain and remedy the incident. The SOC Analyst must maintain a good knowledge of the threat landscape, help enhance current capabilities, and provide support in the identification of new methods of detecting threats.

Job Duties:

• Monitors security event platforms and follows incident playbook for first response, triage, potential resolution, and participates in post-mortem activities, as required
• Conducts network monitoring and intrusion detection analysis using various network defense tools such as intrusion detection/prevention systems (IDS/IPS), firewalls, host-based security systems (HBSS), Azure security, and audit log management etc.
• Provides proactive feedback to enable improvement of the current monitoring rules based on information and knowledge/experience
• Creates daily, weekly, and monthly reports for Security Management Team
• Performs front line response and escalation tasks and updates runbooks and procedures, as needed
• Compiles statistics and contributes to the improvement and creation of playbooks
• Uses public cyber security resources (e.g., sites/blogs/podcasts) to stay up to date with latest news, threats, and security analysis tools
• Participates in on-call rotation
• Other duties as required

Qualifications, Knowledge, Skills and Abilities:

Education:

• High School Diploma or GED, required
• Bachelor’s Degree in Cybersecurity, Information Technology, or Computer Science, preferred

Experience:

• Two (2) or more years of experience within cloud technologies such as Azure, Azure Stack, Azure Backups, AWS, or similar cloud experience, required
• One (1) or more years of experience of network protocols, configurations, or operations, required
• One (1) or more years of experience in infosec, cybersecurity, system, or networking, required
• Experience with EDR platform or SIEM Platform, preferred
• Experience with help desk ticketing systems and service desk management tools, preferred

License(s)/Certification(s):

• Microsoft SC-900, 200, preferred
• Any IT security certifications, preferred

Software:

• Experience with three (3) or more of the following, required:
  • Microsoft Sentinel
  • Information Security tools & packet analyses tools (e.g. CB, Wireshark)
  • Intrusion Detection (e.g. IDS/IPS tools)
  • Firewall troubleshooting experience
  • Strong Windows and Linux experience
  • Internet Protocols and Services (e.g. TCP/IP, FTP, HTTPS, SSH)
  • Networking infrastructure
  • Log analysis/ Windows event analysis
  • Network and Host basic forensics
  • Antivirus solutions
  • Troubleshooting and root cause analyses

Other Knowledge, Skills & Abilities:

• Strong verbal and written communication skills
• Ability to react quickly, decisively, and deliberately in high-stress, high-impact situations
• Ability to triage problems, design and identify solutions and appropriately elevate issues in fast-paced environment
• Excellent interpersonal and customer relationship skills
• Ability to work in a deadline-driven environment while handling multiple projects/tasks simultaneously with a focus on details
• Ability to multi-task while working independently or within a team environment
• Ability to work well under pressure while dealing with unexpected problems in a professional manner
• Ability to communicate technical issues with non-technical people
• Must possess good work habits, a strong work ethic, and be able to adhere to company work hours, policies, and standard business etiquette

KEYWORDS:

SOC, Networking, Security, Intrusion Detection, Windows, Linux, Internet Protocol, Network Infrastructure, Host and Network Based Forensics, Antivirus Solutions, Troubleshooting, EDR Platform, SIEM Platform, Cyber Security, Cyber, Network Operations Center, Security Operations Center

Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.

National Range: $75,000 - $95,000
Maryland Range: $75,000 - $95,000
NYC/Long Island/Westchester Range: $75,000 - $95,000