SOC Analyst (Tier 2)

Silpa Consulting LLC; Houston (TX); Hybride; USD 90 000 - 130 000; Plein temps

Résumé du poste

Silpa Companies in Houston is seeking a Tier 2 SOC Analyst focused on detection engineering, alert triage, and active incident response. You will own escalation queues, tune detections, write new rules from threat intel, and lead containment for real client incidents across SIEM and EDR stacks including Sentinel, Splunk, Elastic, and Defender.

Remote options may be considered for engagements. Ideal candidates have 3+ years in SOC, hands-on SIEM/EDR experience, MITRE ATT&CK knowledge, and strong

Qualifications

• 3+ years in SOC or detection engineering at Tier 2+.
• 1

Responsabilités

• Own Tier 2 escalation queue across client SIEM/EDR.
• ],}],
• CoT_job_summary_short
• job_summary_short
• CoT_job_summary_short”:

Connaissances

SOC analyst experience

Detection engineering

MITRE ATT&CK knowledge

Query languages

Python or PowerShell scripting

Authorized to work in the U.S.

Travel readiness

Houston area preference

Outils

Splunk

Elastic

Microsoft Sentinel

QRadar

Chronicle

CrowdStrike

SentinelOne

Defender for Endpoint

Carbon Black

Description du poste

Pay Contract rate commensurate with experience and engagement scope.

Silpa Companies is hiring a Tier 2 SOC Analyst for client engagements that focus on detection engineering, alert triage, and active incident response across SIEM and EDR stacks (Microsoft Sentinel, Splunk, Elastic, CrowdStrike, SentinelOne, Defender for Endpoint). You will own the escalation queue, tune noisy detections, write new ones based on threat intel, and lead investigation through containment for real client incidents. This is hands-on detection and response work, not alert-shoveling.

What you /
will do

• Own the Tier 2 escalation queue across client SIEM and EDR consoles; investigate to root cause.
• Tune existing detections to reduce false-positive rate without reducing true-positive coverage.
• Author new detections based on threat intel, ATT&CK technique coverage gaps, and incident learnings.
• Lead containment, eradication, and recovery for real incidents in coordination with client IR teams.
• Author post-incident reports including timeline, root cause, technique mapping, and recommendations.
• Build SOAR playbooks (XSOAR, Tines, Torq, Sentinel automation rules) for high-volume alert categories.
• Triage cloud-native alerts (GuardDuty, Defender for Cloud, Security Command Center) alongside endpoint and network signals.
• Run threat-hunt sprints on hypothesis-driven queries; produce findings the client can act on.
• Mentor Tier 1 analysts on triage methodology and detection-tuning practice.

What we /
look for

• 3 or more years of SOC analyst or detection engineering experience at Tier 2 or higher.
• Hands-on experience with at least one major SIEM (Sentinel, Splunk, Elastic, QRadar, Chronicle).
• Hands-on experience with at least one major EDR (CrowdStrike, SentinelOne, Defender for Endpoint, Carbon Black).
• Working knowledge of MITRE ATT&CK and detection-engineering practice.
• Strong query-language fluency in at least two of: KQL, SPL, Lucene, ES|QL, YARA-L.
• Comfortable scripting in Python or PowerShell for automation and enrichment.
• Authorized to work in the U.S.
• Candidates located in the Houston, Texas area will be given preference; remote consultants will also be considered.
• Reliable, secure internet connection and ability to travel to client sites as required by engagement scope.

Why /
join

Silpa Companies places SOC Analyst (Tier 2)s on engagements where the work is real, the environments are non-trivial, and your contributions move the needle for client teams. Practitioners who deliver consistently are prioritized for follow-on and expanded scope engagements within the Silpa network.

• Real engagement ownership across diverse industries and technology environments
• Direct partnership with client engineering, data, security, or executive teams
• Priority for follow-on and expanded scope engagements based on quality of delivery
• Flexible contract and project-based structure
• Collaborative delivery team with experienced Silpa engagement leads

About /
us

Silpa Companies, LLC is a national IT consulting and staffing firm empowering organizations across multiple industries through a blend of AI adoption, Master Data Management, Data and Analytics, Cybersecurity, Cloud Engineering, DevSecOps/GitOps, Fractional C-Suite leadership, Digital Transformation, and M&A advisory for private equity and software ventures.