SOC Analyst

Cyber8; Utica (MI); Hybrid; USD 65,000 - 90,000; Full time

Benefits offered by this job

Dynamic work environment

Challenging projects

Competitive compensation and benefits

Job summary

Cyber8 is seeking a SOC Analyst to join our 24x7 Security Operations Centre in Michigan. You will monitor security events across multiple data sources, respond to threats, and help improve our security posture. Your work will protect client environments and contribute to strategic security initiatives.

The role requires 1+ years in information security, with experience in networking, cloud, or endpoint security. Strong scripting skills and collaboration with cross-functional teams are essential.

Qualifications

• Bachelor/Masters in IT, Computer Science or Cybersecurity.
• 1+ years in Information Security, Network or Cyber Security roles.
• Hands-on experience in roles like Network Admin, System Admin or Cloud Admin is desirable.

Responsibilities

• Monitor network, endpoint, and log sources to identify security incidents and prioritize by severity.
• Investigate suspicious activities to determine root causes and coordinate with internal teams.
• Perform quality reviews on security tickets and look for automation opportunities.
• Share expertise and mentor team members on threat detection and incident response.
• Document security incidents and communicate findings and remediation steps to stakeholders.

Skills

Security analysis

Event monitoring

Networking basics

Cloud platforms

Endpoint security

Scripting

Education

Bachelor/Masters in IT/Computer Science/ Cybersecurity

Tools

Active Directory

SSO

MFA

Job description

As a SOC Analyst at Cyber8, you will play acritical role in our 24x7 Security Operations Centre. You will monitor and analyze security events across multiple data sources, respond swiftly to potential threats, and drive continuous improvements in our security posture. Your expertise will be key in detecting and mitigating risks, ensuring our clients' environments remain secure, and contributing to our overall security strategy.

Key Responsibilities

• Event Monitoring &Analysis: Continuously monitor network, endpoint, and log sources to identify potential security incidents. Quickly analyze incoming alerts and prioritize them based on severity and impact.
• Incident Detection &Response: Investigate suspicious activities and security events to determine root causes and potential threats. Coordinate with internal teams and, when necessary, engage specialized groups to manage and resolve incidents.
• Process Improvement: Perform quality reviews on security tickets and engagements to ensure high standards are maintained. Identify opportunities for automation and optimization within our security monitoring and response workflows.
• Collaboration &Mentorship: Share technical expertise with colleagues to promote best practices in threat detection and incident response. Provide coaching and guidance to team members as needed.
• Documentation &Communication: Maintain detailed records of security incidents and investigations. Clearly communicate incident findings and recommended remediation steps to relevant stakeholders.

Qualifications & Experience

Education:

• Bachelor/Masters in IT/Computer Science/ Cybersecurity

Technical Experience:

• Minimum 1+ years of experience in Information Security, Network Security, or Cyber Security roles.
• Prior hands-on experience in roles such as Network Administrator, System Administrator, or Cloud Administrator is highly desirable.

Core Competencies

• Proficient in analyzing security events and logs from diverse IT systems.
• Strong knowledge in at least two of the following areas:
• Networking: Understanding of common protocols, server/client infrastructure, and network devices (routers, switches, etc.).
• Perimeter Security: Experience with firewalls, IDS/IPS, UTMs, and related technologies.
• Authentication &Identity Management: Familiarity with Active Directory, SSO, MFA, etc.
• Cloud Technologies: Working knowledge of cloud platforms such as AWS, Azure, or GCP.
• Endpoint Security: Experience with EDR, AV, or MDM solutions.
• SaaS Platforms: Understanding of collaboration tools like O365, GSuite, or other enterprise applications.

Scripting & Automation:

Ability to use scripting languages such as Python, Bash, or PowerShell to streamline incident response and data analysis.

Soft Skills:

• Excellent written and verbal communication skills.
• A proactive, positive attitude with a willingness to learn and continuously improve.

What We Offer:

• A dynamic work environment with a strong culture of innovation and professional growth.
• Opportunities to work on challenging projects with cutting-edge security technologies.
• Competitive compensation and benefits package.

Join Cyber8 and be a key player in defending our digital future!

Cyber8 delivers cutting-edge cybersecurity solutions to protect businesses from evolving threats. From incident response to cloud security, we provide end-to-end protection with expert-driven services. Stay secure, stay ahead with Cyber8.