SOC Engineer

No Limit Staffing, Inc.; United States; On-site; USD 90,000 - 120,000; Full time

Job summary

No Limit Staffing, Inc. is seeking a hands-on SOC Analyst/Engineer to monitor, detect, investigate, and respond to cybersecurity threats across enterprise environments.

The role emphasizes SIEM, EDR, incident response, threat detection, and security monitoring. The ideal candidate will investigate security incidents, analyze logs with SIEM tools, develop detection rules, perform threat hunting, and collaborate with infrastructure, cloud, and networking teams to remediate issues.

Qualifications

• 3+ years of experience in SOC, Cybersecurity, Security Operations, or Incident Response.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic.
• Experience with EDR/XDR platforms such as CrowdStrike, Defender, SentinelOne, or similar.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and networking concepts.
• Experience analyzing Windows and Linux security logs.
• Knowledge of MITRE ATT&CK framework.
• Experience in incident investigation and response.
• Understanding of threats including phishing, malware, ransomware, credential attacks, and privilege escalation.
• Strong analytical and troubleshooting skills.

Responsibilities

• Monitor security events and alerts across enterprise environments.
• Investigate and respond to security incidents, suspicious activity, and potential threats.
• Analyze logs and security events using SIEM platforms.
• Develop and tune detection rules, alerts, and use cases.
• Perform threat hunting and identify indicators of compromise (IOCs).
• Investigate endpoint, network, identity, and cloud security events.
• Perform malware, phishing, and email investigations.
• Participate in incident response, containment, eradication, and recovery.

Skills

SOC operations

Cybersecurity

Security operations

Incident response

SIEM platforms

EDR/XDR

Networking concepts

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

Job description

We are seeking a skilled SOC Analyst / Engineer to monitor, detect, investigate, and respond to cybersecurity threats across enterprise environments. The ideal candidate will have hands-on experience with SIEM, EDR, incident response, threat detection, and security monitoring.

Key Responsibilities

• Monitor security events and alerts across enterprise environments.
• Investigate and respond to security incidents, suspicious activity, and potential threats.
• Analyze logs and security events using SIEM platforms.
• Develop and tune security detection rules, alerts, and use cases.
• Perform threat hunting and identify indicators of compromise (IOCs).
• Investigate endpoint, network, identity, and cloud security events.
• Perform malware, phishing, and suspicious email investigations.
• Participate in incident response, containment, eradication, and recovery activities.
• Document security incidents and prepare detailed investigation reports.
• Collaborate with infrastructure, cloud, networking, and application teams to remediate security issues.
• Continuously improve SOC processes, detection capabilities, and security monitoring.
• Stay current with emerging threats, vulnerabilities, and attack techniques.

Required Skills

• 3+ years of experience in SOC, Cybersecurity, Security Operations, or Incident Response.
• Strong hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic.
• Experience with EDR/XDR platforms such as CrowdStrike, Microsoft Defender, SentinelOne, or similar.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and networking concepts.
• Experience analyzing Windows and Linux security logs.
• Knowledge of MITRE ATT&CK framework.
• Experience with incident investigation and response.
• Understanding of common cyber threats including phishing, malware, ransomware, credential attacks, and privilege escalation.
• Strong analytical and troubleshooting skills.

Preferred Skills

• Python, PowerShell, or Bash scripting.
• Threat hunting experience.
• Cloud security experience with AWS or Azure.
• Experience with SOAR platforms and security automation.
• Vulnerability management experience.
• Knowledge of NIST, CIS, and ISO 27001 security frameworks.
• Experience developing SIEM dashboards, correlation rules, and detection use cases.
• Security certifications such as Security+, CySA+, CEH, GCIH, or CISSP.

Ideal Candidate

A hands-on security professional who can move beyond basic alert monitoring and independently investigate threats, perform threat hunting, improve detections, and support incident response in a modern enterprise SOC.