SOC Analyst: Incident Response & Threat Hunter

Inforcer; Cerritos (CA); On-site; USD 90,000 - 130,000; Full time

Job summary

Inforcer is seeking a SOC Analyst to monitor, investigate, and respond to security threats across our environment. You will act as the front line of security operations, reviewing alerts, and conducting hands-on investigations using SIEM, EDR, and threat intel tools.

This is an operational role with real ownership in a fast-paced setting. You will also help strengthen detection and response by improving playbooks, reducing noise, and ensuring incidents are handled quickly and with high quality.

Qualifications

• Hands-on alert triage experience in a SOC, MSP, MSSP or internal security team.
• Working KQL, you can query sign-in, audit and hunting data to answer a question unaided.
• Strong Microsoft 365 and Entra ID security knowledge: authentication flows, conditional access, OAuth and app consent, mailbox and delegation permissions, and the audit trail behind each.
• Practical understanding of MITRE ATT&CK and identity-led attack techniques against Microsoft 365.
• Sound judgement on when evidence supports a conclusion, and the confidence to say when it does not.
• Clear, concise written English for a technical audience, under time pressure

Responsibilities

• Monitor our In-house Custom tooling for real‑time alerts and suspicious activity.
• Triage, investigate, and document security incidents following established playbooks.
• Perform In-depth log analysis across our customer estate
• Escalate incidents as needed and collaborate with internal teams
• Support containment and remediation efforts
• Contribute to improving detection content by identifying gaps, false positives, and tuning opportunities.
• Participate in threat hunting exercises and proactive investigations into anomalous behaviour.
• Assist with onboarding and operationalizing new security tools and processes.
• Stay current with emerging threats, attack techniques, and security best practices.

Skills

Alert triage

KQL querying

Microsoft 365 security

MITRE ATT&CK

Decision making

Technical English

Tools

SIEM

EDR

Threat intel tools

Job description

Inforcer is seeking a SOC Analyst to monitor, investigate, and respond to security threats across our environment. You will act as the front line of security operations, reviewing alerts, and conducting hands-on investigations using SIEM, EDR, and threat intel tools.

This is an operational role with real ownership in a fast-paced setting. You will also help strengthen detection and response by improving playbooks, reducing noise, and ensuring incidents are handled quickly and with high quality.