SOC Analyst (Remote)

Motion Recruitment; Boston (MA); Remote; USD 90,000 - 120,000; Full time

Benefits offered by this job

Fully remote

Job summary

Motion Recruitment is seeking a SOC Analyst to join a global technology organization serving the property and casualty insurance industry. The role focuses on threat detection, incident response, cloud security, and security operations across AWS, EDR, and SIEM environments.

You will monitor systems, investigate incidents, perform root cause analysis, document findings, and collaborate with security teams to reduce risk in a fast-paced SOC.

Qualifications

• ,

Responsibilities

• Monitor enterprise systems and networks for potential cybersecurity threats and suspicious activity.
• Investigate and respond to security incidents across cloud, endpoint, and enterprise environments.
• Analyze and remediate alerts generated from AWS security tools, SIEM platforms, endpoint detection solutions, and phishing reports.
• Conduct incident triage, root cause analysis, and escalation activities when necessary.
• Document investigations, findings, response actions, and remediation recommendations.
• Collaborate with security teams and key stakeholders to reduce organizational risk.
• Assist with improving incident response procedures and overall security operations practices.
• Support a fast-paced Security Operations Center (SOC) environment.

Skills

Incident detection and response

AWS cloud security

SIEM monitoring

EDR experience

Phishing investigations

Analytical thinking

Written and verbal communication

Remote team collaboration

Tools

CrowdStrike

SIEM platforms

AWS security tools

Job description

About The Opportunity

We're seeking a SOC Analyst to support a global technology organization that serves the property and casualty insurance industry. Operating across 40+ countries and supporting hundreds of insurance clients worldwide, this organization maintains a complex enterprise environment and is committed to protecting critical business operations through advanced cybersecurity practices.

This is an excellent opportunity for a security professional who enjoys threat detection, incident response, cloud security, and security operations. You'll play a key role in monitoring, investigating, and responding to security events across AWS cloud environments, endpoint security platforms, and enterprise SIEM solutions.

Responsibilities

• Monitor enterprise systems and networks for potential cybersecurity threats and suspicious activity.
• Investigate and respond to security incidents across cloud, endpoint, and enterprise environments.
• Analyze and remediate alerts generated from AWS security tools, SIEM platforms, endpoint detection solutions, and phishing reports.
• Conduct incident triage, root cause analysis, and escalation activities when necessary.
• Document investigations, findings, response actions, and remediation recommendations.
• Collaborate with security teams and key stakeholders to reduce organizational risk.
• Assist with improving incident response procedures and overall security operations practices.
• Support a fast-paced Security Operations Center (SOC) environment.

Required Qualifications

• Experience with incident detection, investigation, and response within enterprise environments.
• Hands-on experience responding to AWS Cloud security alerts.
• Experience monitoring and investigating SIEM-generated alerts.
• Strong experience with Endpoint Detection & Response (EDR) platforms, preferably CrowdStrike.
• Experience conducting phishing investigations and remediation activities.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication abilities.
• Ability to work independently and effectively within a remote team environment.

Preferred Qualifications

• Experience supporting organizations within the insurance, financial services, or highly regulated industries.
• Previous experience working in large-scale global enterprise environments.
• Familiarity with mature security operations and incident response programs.
• Knowledge of enterprise cybersecurity frameworks and best practices.

Why Apply?

• Fully remote work environment.
• Opportunity to work with modern cloud security, EDR, and SIEM technologies.
• Exposure to large-scale global security operations.
• Hands-on incident response and threat investigation experience.
• Potential for long-term opportunities based on performance.