SOC Analyst – Splunk & SIEM (Remote, US)

WinTrio LLC; United States; On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

Healthcare (Medical, Dental, Vision)

401(k) Plan

Paid Time Off (PTO)

Annual Bonus

Job summary

WINTrio LLC is seeking a Security Operations Center (SOC) Analyst with Splunk SIEM expertise to monitor, investigate, and respond to security events across federal environments. You will develop detections, refine dashboards, and support incident response activities in a remote U.S.

setting with occasional travel. Ideal candidates have 3+ years in cybersecurity operations, strong log analysis, and familiarity with cloud and on-premise security logs, aligning with federal requirements and

Qualifications

• Bachelor’s degree or equivalent experience in cybersecurity or IT.
• Minimum three years in cybersecurity operations, SOC, or incident response.
• Hands-on Splunk or SIEM experience and log analysis.
• Experience analyzing Windows/Linux/AD/Azure logs and cloud services.
• Familiarity with federal cybersecurity requirements and compliance reporting.

Responsibilities

• Monitor security alerts and triage incidents using Splunk dashboards.
• Correlate events across firewalls, endpoints, identity systems, and cloud.
• Develop and tune Splunk searches, alerts, and dashboards.
• Support incident response activities including containment and recovery.
• Document incidents, timelines, and remediation actions in tracking systems.

Skills

Splunk SIEM

Incident response

Threat monitoring

Log analysis

Education

Bachelor's degree in cybersecurity or related field

Tools

Splunk Enterprise

Splunk Enterprise Security

ELK Stack

Microsoft Sentinel

IBM QRadar

Job description

WINTrio LLC is seeking a Security Operations Center (SOC) Analyst with Splunk SIEM expertise to monitor, investigate, and respond to security events across federal environments. You will develop detections, refine dashboards, and support incident response activities in a remote U.S.

setting with occasional travel. Ideal candidates have 3+ years in cybersecurity operations, strong log analysis, and familiarity with cloud and on-premise security logs, aligning with federal requirements and