SOC Cybersecurity Analyst: Threat Detection & Response

Primoris Services Corporation; United States; On-site; USD 110,000 - 120,000; Full time

Benefits offered by this job

401k with employer match

Health/Dental/Vision insurance

Paid time off

10 paid holidays

Stock purchase plan

Job summary

Primoris Services Corporation is seeking a Cybersecurity Analyst – SOC Operations to monitor, detect, investigate, and respond to threats across enterprise environments, including endpoints, identities, and cloud services. The role supports threat monitoring, incident response, and continuous improvement within the SOC.

The candidate will analyze alerts, triage incidents, correlate threat data, and collaborate with IT to contain and remediate risks, with after-hours responsiveness as needed and

Qualifications

• Minimum 5+ years of cybersecurity experience required.
• CrowdStrike Falcon experience required.
• Experience with SIEM platforms such as Microsoft Sentinel or Splunk Enterprise Security and EDR/XDR solutions like Defender for Endpoint.
• Identity and access security experience (Entra ID, Active Directory, PAM).
• Network and cloud security monitoring, telemetry analysis, and familiar with cloud security tooling.
• Proficient scripting in PowerShell, Python, or Bash; familiarity with SOAR and security automation.

Responsibilities

• Monitor enterprise security tools and alerts for suspicious activity.
• Analyze and triage security events from SIEM, EDR, email, network, identity, and cloud platforms.
• Investigate IOCs, anomalous behaviors, and suspicious user activity.
• Correlate logs across security systems to identify threats.
• Escalate high-risk incidents per playbooks and severity classifications.
• Participate in incident response including detection, triage, containment, eradication, recovery, and post-incident review.
• Investigate phishing, malware, ransomware, account compromise, and insider threats.
• Document incident findings and remediation recommendations.
• Support after-hours cybersecurity response when necessary.
• Monitor endpoint security posture and investigate endpoint-related threats.
• Analyze authentication anomalies and support zero-trust initiatives.
• Investigate unusual network behavior and lateral movement attempts.
• Monitor cloud security events across Microsoft 365, Azure, and cloud services.
• Investigate risky cloud behaviors and misconfigurations.

Skills

Cybersecurity experience

CrowdStrike Falcon

Security Monitoring & Detection

Incident Response

SIEM analysis

EDR/XDR

Identity & Access Security

Cloud & Network Security

Scripting

SOAR automation

Tools

CrowdStrike Falcon

MS Sentinel / Splunk ES

EDR/XDR (Defender for Endpoint)

Entra ID / AD

Zscaler

Microsoft security tools

Cloud security monitoring tools

Job description

Primoris Services Corporation is seeking a Cybersecurity Analyst – SOC Operations to monitor, detect, investigate, and respond to threats across enterprise environments, including endpoints, identities, and cloud services. The role supports threat monitoring, incident response, and continuous improvement within the SOC.

The candidate will analyze alerts, triage incidents, correlate threat data, and collaborate with IT to contain and remediate risks, with after-hours responsiveness as needed and