SOC Analyst

Qubika; United States; Remote; USD 95,000 - 130,000; Full time

Job summary

Qubika in the United States is seeking a highly motivated SOC Analyst to join our Security Operations Center. You will monitor security events, perform triage and investigations, and support incident response while maintaining logs and documenting findings.

You will work across cloud and on-prem environments, tune detection rules, follow SOPs, participate in daily briefings, and escalate incidents as needed.

Qualifications

• 5+ years in a SOC environment.
• Basic networking, Windows/Linux, and cybersecurity principles.
• Familiarity with SIEM/SOC tools such as EDR and ticketing systems.
• Strong analytical thinking and attention to detail.
• Experience with MITRE ATT&CK framework and common attack techniques.
• Knowledge of AI/LLM tools to accelerate engineering work and triage.

Responsibilities

• Monitor security alerts and events from sources (SIEM, EDR, firewalls, cloud).
• Perform triage and investigation of potential security incidents.
• Escalate confirmed or suspicious incidents.
• Document findings and logs of investigations and outcomes.
• Support incident response by gathering logs and context.
• Monitor cloud and on-prem environments for unusual behavior.
• Assist in tuning detection rules and updating incident response docs.
• Participate in daily SOC briefings and shift handovers.
• Follow SOPs and escalation protocols.

Skills

Threat monitoring

Incident analysis

Triage

Documentation

Communication

MITRE ATT&CK

AI/LLM tools

SIEM

EDR tools

Cloud/on-prem monitoring

Tools

SIEM Sentinel

EDR solutions

Ticketing systems

Job description

We are looking for a highly motivated SOC Analyst to join our Security Operations Center team. As a frontline defender, you will be responsible for monitoring and analyzing security events to identify potential threats and support incident response.

Key Responsibilities:

• Monitor security alerts and events from various sources (e.g., SIEM, EDR, firewalls, cloud platforms).
• Perform triage and investigation of potential security incidents.
• Escalate confirmed or suspicious incidents.
• Document findings and maintain accurate logs of investigations and outcomes.
• Support incident response efforts by gathering relevant logs and context.
• Monitor cloud and on-prem environments for unusual behavior or policy violations.
• Assist in tuning detection rules and updating incident response documentation.
• Participate in daily SOC briefings and shift handovers.
• Follow standard operating procedures (SOPs) and adhere to escalation protocols.

Requirements:

• 5+ years of experience in a SOC team.
• Basic understanding of networking, operating systems (Windows/Linux), and cybersecurity principles.
• Familiarity with tools such as EDR solutions and ticketing systems.
• Strong analytical thinking and attention to detail.
• Experience with SIEM Sentinel.
• Good written and verbal communication skills in English.
• Knowledge of MITRE ATT&CK framework and common attack techniques.
• Demonstrated practical use of AI/LLM tools (Claude, ChatGPT, Copilot, or equivalent) to accelerate engineering work: query and script generation, automation development, technical documentation, and triage support. Evaluates AI-generated output critically rather than accepting it at face value.

Nice to Have:

• Security certifications such as CompTIA Security+, Microsoft SC-200, or similar.

Shift Model:

The Shift Model in a SOC (Security Operations Center) is a way of organizing work into rotating shifts to ensure continuous 24/7 monitoring.

Analysts are divided into different shifts (morning, afternoon, night), allowing security incidents to be handled at any time.

This model helps maintain active detection and response, distribute workload, and reduce team fatigue.