SOC Analyst 2

Mbi Llc; Harrisburg (Dauphin County); On-site; USD 60,000 - 90,000; Full time

Job summary

Mbi Llc is seeking an on-site security professional to monitor and respond to security events across mission-critical systems. You will document incidents, investigate alerts, and follow established SOC playbooks to quickly determine impact and containment.

Responsibilities include hunting for threats, tuning detections, and supporting 24/7 operations with cross-functional teamwork. Strong communication and problem-solving skills are required.

Qualifications

• Create queries, reports and scripts using security coding and SIEM languages.
• Proficient with troubleshooting tools (software).
• Ability to analyze and interpret diverse information for security context.

Responsibilities

• Perform ongoing, on-site information security and network monitoring with proactive response.
• Capture, log, and respond to events from multiple security sources with proper documentation.
• Investigate security alerts in the SOC to determine scope and potential impact.
• Follow and improve SOC playbooks and SOPs.
• Document incidents and responses per procedures.
• Analyze logs, network capture, and endpoint telemetry for IOCs and threats.
• Conduct initial threat hunting to identify anomalies.
• Tune detection rules and alerts to reduce false positives.
• Participate in root cause analyses and lessons learned.
• Monitor external event sources for security intelligence.
• Provide incident response support during events.
• Support 24/7/365 operations including nights and weekends.

Skills

Queries & SIEM scripting

Troubleshooting tools

Information analysis

Job description

Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems.

Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems, ensuring accurate documentation of incoming data.

Perform security investigation for alerts escalated within the Security Operation Center, determining full scope, potential root cause, and potential impact.

Follow, create, and improve established playbooks and SOPs used by the SOC.

Document security incidents, responses, and related information in accordance with established procedures

Analyze advanced logs, network capture, end-point telemetry to identify malicious activity and indicators of compromise (IOCs)

Conduct initial threat hunting to proactively identify security anomalies and adversary activity

Conduct tuning and optimization of existing detection rules, alerts, and correlation logic to reduce false positives and improve detection fidelity.

Participate in root cause analysis or lessons learned sessions.

Monitor external event sources for security intelligence and actionable incidents

Provide incident response support as needed and directed during network and security events providing support for incident resolution.

Maintain flexibility to work in various shift rotations to support 24/7/365 operations, including days, nights, holidays, and weekends.

Performs other related duties as required.

Decision Making:

Make informed and timely decisions on the appropriate response to security alerts.

Unique issues or problems may be escalated to supervisor.

Work is reviewed periodically for adherence to established standards and established schedules.

Essential Functions:

• Use personal computer/laptop with Microsoft Office products and other business software
• Analyze and interpret various information
• Create queries, reports and scripts leveraging current security coding and SIEM query languages
• Communicates effectively orally and in writing.
• Working knowledge of troubleshooting tools (software)
• Work independently and as a team member

Fill the skill matrix below:

Skill

Amount

Candidate's No. of years of experience

Create queries, reports and scripts leveraging current security coding and SIEM query languages

Required

Required

Working knowledge of troubleshooting tools (software)

Required

Analyze and interpret various information

Required

Fields with * are required

What is your full name?

How can we contact you?

Where are you located?

What is your preferred method of communication?

File Upload: (only PDF, DOC, DOCX are accepted)