SOC Analyst: Frontline Cyber Defense (On-site)

Williams International; Pontiac (MI); On-site; USD 70,000 - 110,000; Full time

Job summary

Williams International, a privately owned aerospace engine manufacturer, seeks a SOC Analyst to join our cyber defense team in Pontiac, MI. You will monitor enterprise security using SIEM/EDR tools, triage alerts, document findings, and escalate incidents to Tier 2/3 as needed.

Responsibilities include log analysis across Windows AD, Linux, and cloud environments, phishing investigations, and maintaining tickets in Jira or ServiceNow.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent hands-on experience.
• 1 year of hands-on experience navigating and querying SIEM platforms (e.g., Splunk, Elastic Search, Wazuh) and EDR/XDR agents (e.g., Defender for Endpoint).
• Solid understanding of the OSI model, TCP/IP networking, common protocols (DNS, HTTP, SMTP, SSH), and basic network routing/switching.
• Proficiency in navigating Windows Active Directory and Linux logs.
• Basic knowledge of cyberattack methodologies, including MITRE ATT&CK framework or Cyber Kill Chain.
• U.S. citizenship is required
• Position may require ability to obtain a U.S. Government Security Clearance and related eligibility.

Responsibilities

• Alert Monitoring: Monitor SIEM, EDR, and network dashboards for security incidents.
• Triage & Classification: Analyze high-volume alerts, filter false positives, and categorize events.
• Incident Escalation: Escalate validated threats to Tier 2/3 with detailed documentation.
• Log Analysis: Review logs from firewalls, IDS/IPS, Active Directory, endpoints, and cloud (AWS/Azure).
• Phishing Investigations: Triage employee phishing reports via email headers and attachments.
• Ticketing & Documentation: Record investigations and remediation steps in Jira or ServiceNow.

Skills

SIEM/EDR exposure

Networking foundations

Operating systems

MITRE ATT&CK framework

US citizenship

Security clearance eligibility

Education

Bachelor’s degree in Cybersecurity/CS/IT or equivalent

Tools

Splunk

Elastic Search

Wazuh

Defender for Endpoint

Job description

Williams International, a privately owned aerospace engine manufacturer, seeks a SOC Analyst to join our cyber defense team in Pontiac, MI. You will monitor enterprise security using SIEM/EDR tools, triage alerts, document findings, and escalate incidents to Tier 2/3 as needed.

Responsibilities include log analysis across Windows AD, Linux, and cloud environments, phishing investigations, and maintaining tickets in Jira or ServiceNow.