SOC Analyst: Threat Detection & Incident Response

Inforcer Ltd.; Cerritos (CA); On-site; USD 90,000 - 120,000; Full time

Job summary

inforcer is seeking a SOC Analyst to monitor, investigate, and respond to security threats across our environment. You will be on the front line of security operations, reviewing alerts, identifying suspicious activity, and conducting hands-on investigations using SIEM, EDR, and threat intelligence tools.

You will help strengthen detection and response capabilities by improving playbooks, reducing noise, and ensuring incidents are handled quickly and with high quality.

Qualifications

• Hands-on alert triage experience in a SOC, MSP, MSSP or internal security team.
• Proficient in writing KQL queries to search sign-in, audit and hunting data.
• Strong Microsoft 365 and Entra ID security knowledge, including authentication flows and conditional access.
• Practical understanding of MITRE ATT&CK and identity-led attack techniques against Microsoft 365.
• Sound judgement on evidence support and knowing when it’s inconclusive.
• Clear, concise written English for a technical audience under time pressure.

Responsibilities

• Monitor in-house custom tooling for real-time alerts and suspicious activity.
• Triage, investigate, and document security incidents following established playbooks.
• Perform in-depth log analysis across our customer estate.
• Escalate incidents as needed and collaborate with internal teams.
• Support containment and remediation efforts.
• Contribute to improving detection content by identifying gaps, false positives, and tuning opportunities.
• Participate in threat hunting exercises and proactive investigations into anomalous behaviour.
• Assist with onboarding and operationalizing new security tools and processes.
• Stay current with emerging threats, attack techniques, and security best practices.

Skills

SOC Experience

KQL queries

MS365 Security

MITRE ATT&CK

Critical thinking

Technical writing

Job description

inforcer is seeking a SOC Analyst to monitor, investigate, and respond to security threats across our environment. You will be on the front line of security operations, reviewing alerts, identifying suspicious activity, and conducting hands-on investigations using SIEM, EDR, and threat intelligence tools.

You will help strengthen detection and response capabilities by improving playbooks, reducing noise, and ensuring incidents are handled quickly and with high quality.