SOC Analyst 2

Lateral Insights LLC; Great Falls (VA); On-site; USD 70,000 - 110,000; Full time

Job summary

Lateral Insights LLC is seeking an experienced SOC Analyst 2 to support the Security Operations Center and protect critical information assets in a 24/7 environment. You will triage events, investigate alerts, and contribute to detection rule improvements.

The role requires hands-on SOC experience, strong incident response skills, and the ability to work in a fast-paced setting with coordination across security, network, and infrastructure teams.

Qualifications

• Hands-on experience in a Security Operations Center environment.
• Experience triaging and investigating security events and alerts.
• Ability to analyze network and endpoint telemetry and respond to incidents.

Responsibilities

• Perform continuous information security and network monitoring and respond to threats.
• Triage, capture, document, and respond to security events from SIEM and other sources.
• Investigate alerts to determine scope, impact, and remediation steps.
• Analyze logs, network packets, and endpoint data to identify IOC threats.
• Conduct threat-hunting to identify anomalies and adversary activity.
• Tune detection rules and SOC playbooks to reduce false positives and improve fidelity.
• Monitor external threat intelligence for emerging threats and IOCs.
• Provide incident response support during cybersecurity events and assist with containment.

Skills

Threat hunting

Incident response

Security event triage

Security monitoring

Documentation

Tools

SIEM

Job description

EOE Statement We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.

Category Information Technology

We are seeking an experienced SOC Analyst 2 to support Security Operations Center (SOC) activities and help protect the confidentiality, integrity, and availability of the Commonwealth's information technology assets. This position is responsible for security event triage, investigation, escalation, threat detection, and incident response while contributing to the continuous improvement of network and security monitoring capabilities.

The SOC Analyst will investigate security alerts, analyze network and endpoint telemetry, identify indicators of compromise, conduct threat hunting, and improve detection rules and SOC processes. The ideal candidate will have hands‑on experience working within a Security Operations Center and be comfortable supporting a 24/7/365 operational environment.

Role: SOC Analyst 2

Location: Harrisburg PA (Onsite Only Role)

Key Responsibilities

• Perform continuous information security and network monitoring and proactively respond to potential threats affecting mission‑critical systems and communication environments.
• Triage, capture, document, and respond to security events received through SIEM platforms, email, chat, telecommunications, and other security systems.
• Investigate alerts escalated within the SOC to determine scope, potential root cause, impact, and appropriate response.
• Analyze advanced security logs, network packet captures, endpoint telemetry, and other security data to identify malicious activity and Indicators of Compromise (IOCs).
• Conduct initial threat-hunting activities to proactively identify security anomalies, suspicious behavior, and potential adversary activity.
• Tune and optimize existing detection rules, alerts, and correlation logic to reduce false positives and improve detection accuracy and fidelity.
• Monitor external intelligence sources for emerging threats, vulnerabilities, IOCs, and actionable security information.
• Provide incident response support during network and cybersecurity events and assist with containment, investigation, remediation, and resolution.
• Participate in root‑cause analysis and lessons‑learned sessions following security incidents.
• Follow established SOC playbooks and Standard Operating Procedures (SOPs) and contribute to their development and continuous improvement.
• Maintain accurate documentation of security incidents, investigations, response activities, findings, and resolutions.
• Develop queries, reports, and scripts using applicable security coding and SIEM query languages.
• Escalate unique, complex, or high-risk security incidents to appropriate leadership or senior SOC personnel.
• Collaborate effectively with security, network, infrastructure, and other technical teams during investigations and incident response.
• Support continuous improvement of SOC monitoring, detection, investigation, and response capabilities.

Full-Time/Part-Time -unspecified-

This position is currently accepting applications.