SOC Analyst

Williams International; Pontiac (MI); On-site; USD 70,000 - 110,000; Full time

Job summary

Williams International, a privately owned aerospace engine manufacturer, seeks a SOC Analyst to join our cyber defense team in Pontiac, MI. You will monitor enterprise security using SIEM/EDR tools, triage alerts, document findings, and escalate incidents to Tier 2/3 as needed.

Responsibilities include log analysis across Windows AD, Linux, and cloud environments, phishing investigations, and maintaining tickets in Jira or ServiceNow.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent hands-on experience.
• 1 year of hands-on experience navigating and querying SIEM platforms (e.g., Splunk, Elastic Search, Wazuh) and EDR/XDR agents (e.g., Defender for Endpoint).
• Solid understanding of the OSI model, TCP/IP networking, common protocols (DNS, HTTP, SMTP, SSH), and basic network routing/switching.
• Proficiency in navigating Windows Active Directory and Linux logs.
• Basic knowledge of cyberattack methodologies, including MITRE ATT&CK framework or Cyber Kill Chain.
• U.S. citizenship is required
• Position may require ability to obtain a U.S. Government Security Clearance and related eligibility.

Responsibilities

• Alert Monitoring: Monitor SIEM, EDR, and network dashboards for security incidents.
• Triage & Classification: Analyze high-volume alerts, filter false positives, and categorize events.
• Incident Escalation: Escalate validated threats to Tier 2/3 with detailed documentation.
• Log Analysis: Review logs from firewalls, IDS/IPS, Active Directory, endpoints, and cloud (AWS/Azure).
• Phishing Investigations: Triage employee phishing reports via email headers and attachments.
• Ticketing & Documentation: Record investigations and remediation steps in Jira or ServiceNow.

Skills

SIEM/EDR exposure

Networking foundations

Operating systems

MITRE ATT&CK framework

US citizenship

Security clearance eligibility

Education

Bachelor’s degree in Cybersecurity/CS/IT or equivalent

Tools

Splunk

Elastic Search

Wazuh

Defender for Endpoint

Job description

World Headquarters
Pontiac, MI 48341, USA

• On-site
• Cyber Security
• Full-Time
• Requisition #: CYBER006699

Description

Who We Are

Williams International is a privately-owned company that develops and manufactures jet engines for both military and commercial aircraft applications. We are a company of creators who deliver pioneering ideas and technologies that lead the aerospace industry. Our culture fosters creativity, collaboration, and continuous learning to position our team members to inspire each other and provide quality products and supporting services that exceed the expectations of our customers.

The Opportunity

Williams International has an exciting opportunity for a SOC Analyst. The SOC Analyst will serve as our front-line defense against cyber threats. You will monitor our enterprise environment using advanced security tools, analyze real-time security alerts, and perform initial triaging to determine severity. Your primary goal is to ensure potential security incidents are identified, documented, and escalated or mitigated quickly to protect our infrastructure.

Responsibilities

• Alert Monitoring: Continuously monitor Security Information and Event Management (SIEM) consoles, EDR platforms, and network dashboards for potential security incidents.
• Triage & Classification: Perform initial analysis on high-volume alerts to filter out false positives and accurately categorize true security events.
• Incident Escalation: Escalate validated threats to Tier 2/3 analysts or incident responders with clear, comprehensive technical documentation.
• Log Analysis: Review and interpret logs from various sources—including firewalls, intrusion detection systems (IDS/IPS), active directory, endpoints, and cloud environments (AWS/Azure).
• Phishing Investigations: Triage suspected employee phishing reports by analyzing email headers, attachments, and embedded URLs in a secure sandbox.
• Ticketing & Documentation: Document all investigative steps, findings, and remediation actions within the designated ticketing system (e.g., Jira, ServiceNow).

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent hands-on experience.
• SIEM/EDR Exposure: Minimum 1 year of hands-on experience navigating and querying SIEM platforms (e.g., Splunk, Elastic Search, Wazuh) and EDR/XDR agents (e.g., Defender for Endpoint).
• Networking Foundations: Solid understanding of the OSI model, TCP/IP networking, common protocols (DNS, HTTP, SMTP, SSH), and basic network routing/switching.
• Operating Systems: Proficiency in navigating and reviewing logs across Windows Active Directory environment and Linux environments.
• Framework Familiarity: Basic knowledge of cyberattack methodologies, including the MITRE ATT&CK framework or the Cyber Kill Chain.
• U.S. citizenship is required
• Position requires the ability to obtain a U.S. Government Security Clearance, if needed. Candidates selected may be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. For more information on Security Clearances, please visit: U.S. Department of State .

Preferred Qualifications & Certifications

While not strictly required, the following credentials highly differentiate candidates:

• Certifications: CompTIA Security+, CompTIA CySA+ (Cybersecurity Analyst), GiAC Security Essentials (GSEC), or Cisco Certified CyberOps Associate.
• Scripting: Basic ability to read or modify scripts (Python, PowerShell, or Bash) to assist in automating repetitive daily workflows.
• Home Labs / Capture the Flag (CTF): Active participation in hands-on learning platforms like TryHackMe, Hack The Box, or Blue Team Labs Online.

Additional Information

Williams International is a Drug Free Workplace where all new team members and contractors are subject to pre-employment drug testing for the following controlled substances: marijuana, cocaine, PCP, amphetamines, opioids and alcohol as policy dictates.

Williams International is committed to equal employment opportunities for all individuals regardless of race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, and protected veteran status.

Please view Equal Employment Opportunity Posters provided by OFCCP here .

If you are interested in applying for employment with Williams International and need special assistance or an accommodation to use our website or to apply for a position due to a physical and/or mental disability, please send an e-mail with your request to [e-mail] . Or please call 248-624-5200. Determination on requests for reasonable accommodation is made on a case‑by‑case basis.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.