SOC Analyst II — Incident Response & Threat Hunting

University of Utah; Campus (IL); On-site; USD 73,000 - 93,000; Full time

Benefits offered by this job

UR retirement plan information not in

Job summary

The University of Utah is seeking a Cybersecurity Analyst Tier 2 for the Security Operations Center to support information security and compliance goals. You will handle mid-tier investigations, perform root cause analysis, and optimize operations, serving as a bridge between Tier 1 and Tier 3 engineering while mentoring junior analysts.

As part of UIT, you will join a central IT service provider that supports campus networks, CIS, UMail, and digital learning technologies.

Qualifications

• Bachelor’s degree (or equivalent) + 4 years of directly related work experience, or Master’s (or equivalent) + 2 years.
• 4 years dedicated cybersecurity operations, threat triage, or incident response experience in a SOC environment.

Responsibilities

• Perform in-depth investigations and root cause analysis for escalated security incidents across endpoints, networks, cloud, and identity.
• Mentor Tier 1 analysts and improve SOC workflows and triage procedures.
• Tune detection logic with Tier 3 for reduced false positives and improved alert fidelity.
• Draft incident postmortems and document technical findings for stakeholders.

Skills

Incident response

Threat hunting

Log analysis

MITRE ATT&CK

Mentoring

KQL

SPL

YARA

SIEM/EDR/cloud

Education

Bachelor's degree or higher

Tools

SOAR

SIEM

EDR

Job description

The University of Utah is seeking a Cybersecurity Analyst Tier 2 for the Security Operations Center to support information security and compliance goals. You will handle mid-tier investigations, perform root cause analysis, and optimize operations, serving as a bridge between Tier 1 and Tier 3 engineering while mentoring junior analysts.

As part of UIT, you will join a central IT service provider that supports campus networks, CIS, UMail, and digital learning technologies.