SOC Analyst II: Threat Detection & Incident Response

Clinisoltech; Chicago (IL); On-site; USD 65,000 - 75,000; Full time

Job summary

Clinisol Tech Inc. is seeking a Cyber Security SOC Analyst II to monitor, investigate, and respond to cybersecurity threats while supporting incident response and strengthening the organization's overall security posture.

In this role, you will use EDR platforms, SIEM tools, and security log analysis to detect and mitigate threats, coordinate with IT and security teams, and document findings within MITRE ATT&CK framework.

Qualifications

• Bachelor's degree in Cyber Security, IT, CS, or related field.
• 0–2 years of experience in IT Help Desk, Desktop Support, SOC Ops, Cyber Security, or Incident Response.
• Experience with EDR platforms, SIEM tools, and security log analysis.
• Strong understanding of networking, Active Directory, Windows security, and incident response.
• Excellent analytical, communication, and problem-solving skills.

Responsibilities

• Monitor and investigate security alerts using EDR platforms (CrowdStrike, SentinelOne, Defender).
• Analyze phishing, malware, and suspicious network activities to identify threats.
• Perform incident triage, investigation, containment, and escalation as needed.
• Utilize SIEM, Wireshark, and AD tools to support investigations.
• Document incidents and map findings to MITRE ATT&CK framework.
• Collaborate with IT and security teams to improve threat detection and response.

Skills

Analytical thinking

Communication

Problem solving

Education

Bachelor's degree in Cyber Security, IT, CS

Tools

CrowdStrike

SentinelOne

Microsoft Defender

Splunk

QRadar

Microsoft Sentinel

ServiceNow

Sysmon/Windows Event Logs

VirusTotal

SPL/KQL

Job description

Clinisol Tech Inc. is seeking a Cyber Security SOC Analyst II to monitor, investigate, and respond to cybersecurity threats while supporting incident response and strengthening the organization's overall security posture.

In this role, you will use EDR platforms, SIEM tools, and security log analysis to detect and mitigate threats, coordinate with IT and security teams, and document findings within MITRE ATT&CK framework.