SOC Analyst II - Threat Detection & Incident Response

LPL Financial LLC; Tempe (AZ); Hybrid; USD 73,000 - 122,000; Full time

Job summary

LPL Financial is seeking an Information Security Analyst II to join the Security Operations Center in a hybrid role based in Tempe, AZ. You will monitor, triage, and respond to security events using SIEM and SOAR while supporting multiple security platforms.

The role requires 2+ years in a SOC, knowledge of Internet protocols, and relevant certifications; AWS/Azure familiarity, Python scripting, and strong communication are a plus. This is a non-sponsoring role.

Qualifications

• 2+ years of SOC analyst experience required.
• Ability to adapt to changing environments.
• Customer service oriented with the ability to meet expectations within project scope.
• Knowledge of a variety of Internet protocols.
• Professional certifications (GCIH, CySA+, etc.).
• Experience with Cloud services like Azure and AWS is a plus.

Responsibilities

• Monitor and process responses for security events as an active member of the SOC team.
• Triage, investigate and respond to events produced by our SIEM solution; mitigate threats.
• Enforce information security policies, standards and guidelines.
• Identify IT security risks from technical and functional perspectives.
• Notify management of incidents and articulate history, status and impact.
• Assist Incident Responders when escalation is required; provide detailed event recounts.
• Configure and work with SIEM and SOAR tools.
• Communicate effectively in a fast-paced team environment.
• Perform other duties to support the SOC as needed.

Skills

Python scripting

Communication

Customer service orientation

Adaptability

Education

Bachelor's degree in related field

Tools

SIEM

SOAR

Job description

LPL Financial is seeking an Information Security Analyst II to join the Security Operations Center in a hybrid role based in Tempe, AZ. You will monitor, triage, and respond to security events using SIEM and SOAR while supporting multiple security platforms.

The role requires 2+ years in a SOC, knowledge of Internet protocols, and relevant certifications; AWS/Azure familiarity, Python scripting, and strong communication are a plus. This is a non-sponsoring role.