Soc Analyst

Royal Cyber; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

Royal Cyber is seeking a SOC Analyst in the United States with 4+ years in security operations to monitor security events and perform triage. You will work with SIEMs, MDR services, and Defender for Endpoint to analyze threats and investigate incidents.

The role requires strong documentation and communication skills to clearly convey findings to both technical and nontechnical stakeholders. Join our global IT security team to protect enterprise environments.

Qualifications

• At least 4+ years of experience in a Security Operations Center or equivalent security role.
• Experience monitoring a SIEM/MDR or security investigation queue.
• Familiarity with Microsoft Defender products, especially Defender for Endpoint.
• Ability to analyze security logs and telemetry.
• Strong written and verbal English communication skills.
• Experience with ticketing or case-management systems.
• Ability to document investigation findings and analytical conclusions.
• Ability to follow established procedures while applying judgment to less-defined situations.

Responsibilities

• Monitor a SIEM/MDR or security investigation queue.
• Perform initial security investigation triage.
• Work with endpoint, identity, network, email, and cloud security concepts.
• Familiarity with Defender for Endpoint and other security products.
• Document investigation findings and analytical conclusions.
• Communicate urgent security concerns to technical and nontechnical personnel.

Skills

Security Operations Center

Cybersecurity monitoring

Incident triage

Endpoint security concepts

Network security concepts

Log analysis

Communication skills

Documentation

Tools

Rapid7 Insight IDR

Rapid7 MDR

Microsoft Defender for Endpoint

SIEM platforms

Job description

Dear Candidate,

We have Job opening for SOC Analyst, please find the detailed description below

Company Details :

Royal Cyber is a trusted global IT consulting & digital transformation partner, empowering enterprises for over two decades to evolve with agility, security, and innovation. Founded in 2002, Royal Cyber has built a strong legacy of helping organizations modernize legacy systems, embrace cloud-native technologies, and adopt AI-driven solutions. With 20+ years of delivering business-critical digital projects, we serve clients across USA, Canada, UK, UAE, KSA, India, Australia, and more with innovation hubs and delivery centers strategically located to support 24/7 operations. Global Presence: Headquartered in Naperville, IL (USA) Operations in 15+ countries 1,000+ certified consultants 1,000+ successful global deployments Fortune 500 client base across retail, banking, insurance, manufacturing, healthcare, and public sector What We Specialize In: Cloud Transformation & DevOps (Azure, GCP, AWS) Generative & Agentic AI (Enterprise-grade use cases powered by LLMs) Digital Commerce & CX Platforms (Salesforce, SAP Commerce, Adobe, Magento, Creatio, HubSpot, Commerce tools) Enterprise Integration & API Management (MuleSoft, Boomi, IBM) Hyper automation & Low Code Enablement (UiPath, Appian, Power Platform) Data Governance, Privacy & Security (Microsoft Purview, Zero Trust) Legacy Modernization & Mainframe Refactoring (COBOL to Java, Monolith to Microservices)Royal Cyber is on a journey to become the worlds most agile modernization partner blending innovation, strategy, and delivery excellence to accelerate enterprise evolution.

KEY RESPONSIBILITIES

At least 4+ years of experience in a Security Operations Center, cybersecurity monitoring, incident triage, or a comparable security operations role

• Experience monitoring a SIEM, MDR, or security investigation queue
• Experience performing initial security investigation triage
• Working knowledge of endpoint, identity, network, email, and cloud security concepts
• Familiarity with Rapid7 Insight IDR, Rapid7 MDR, or comparable SIEM and investigation platforms
• Familiarity with Microsoft Defender security products, particularly Microsoft Defender for Endpoint
• Understanding of common attack techniques, including phishing, credential compromise, malware, persistence, privilege escalation, suspicious authentication, and unauthorized access
• Ability to search and analyze security logs
• Ability to analyze basic endpoint, authentication, network, and cloud telemetry
• Experience using ticketing or case-management systems
• Ability to accurately document investigation findings and analytical conclusions
• Ability to follow established procedures while applying appropriate judgment to less-defined situations
• Ability to distinguish between blocked attempts, successful activity, false positives, expected behavior, and potentially malicious events
• Strong written and verbal English communication skills
• Ability to clearly communicate urgent security concerns to technical and nontechnical personnel