SOC Engineer (Level 2)

Cts; New York (NY); Remote; USD 80,000 - 85,000; Full time

Benefits offered by this job

Health Insurance

HSA

FSA

EAP

401(k) with company match

Disability Insurance (short/long)

Life and AD&D Insurance

10 Holidays

2 Floating Holidays

Job summary

CTS is seeking an experienced SOC Engineer - Level 2 to join our Security Operations Center. You will monitor, analyze, and respond to security incidents, guiding Level 1 engineers and contributing to the overall security posture in a fast-paced environment.

The role requires strong technical expertise, excellent analytical skills, and the ability to work remotely for a full-time schedule 7am–4pm EST. Compensation ranges from $80,000 to $85,000 with benefits in the United States.

Qualifications

• Education: Bachelor’s degree in Cybersecurity, IT, CS or related field, or equivalent experience.
• 3-5 years in a SOC or cybersecurity role, with 1-2 years at Level 2 position or equivalent.
• Certifications such as CompTIA Security+, CySA+ or equivalent preferred.

Responsibilities

• Monitor and analyze security alerts and incidents, investigate complex threats, and respond effectively.
• Lead security incidents, coordinate with IT/security teams to contain and recover from breaches.
• Perform detailed forensic analysis to identify root causes and attack vectors.
• Assist in vulnerability management, assessments, and remediation within the infrastructure.
• Maintain and optimize security tools (SIEM, IDS/IPS, firewalls, endpoint protection).
• Mentor Level 1 SOC Engineers and provide training to improve incident response skills.
• Create and maintain documentation of incidents, analyses, and responses for compliance.
• Generate security reports and provide insights to improve posture.
• Stay updated on threats, vulnerabilities, and best practices to improve SOC processes.
• Participate in rotating on-call to support after-hours incidents.

Skills

Security monitoring tools (SIEM)

IDS/IPS

Network security

Endpoint security

Incident response

Forensic analysis

Python scripting

PowerShell scripting

Cloud security (AWS/Azure)

Education

Bachelor’s degree in Cybersecurity

Information Technology

Computer Science

Tools

SIEM

IDS/IPS

Firewalls

Endpoint protection

Forensic tools

Automation tooling

Job description

CTS delivers comprehensive IT solutions to meet the unique demands of mission-driven organizations. We have deep expertise in supporting nonprofits and educational institutions, however our team is equipped to handle the complexities of IT across a variety of sectors. We’re committed to making technology work seamlessly, so our clients can focus on making a difference, regardless of their industry.

At CTS, we believe in building a company culture that fosters growth, collaboration, and innovation. By joining our team, you will not only help empower businesses with cutting-edge IT solutions but also build a rewarding career in a dynamic and supportive environment. Discover the many reasons why CTS is a great place to advance your career. We are headquartered in Brooklyn, NY with 90+ employees across the US and several other countries. Learn more about us at https://www.charterts.com

JOB SUMMARY

We are looking for an experienced SOC Engineer - Level 2 to join our Security Operations Center (SOC) team. As a Level 2 SOC Engineer, you will play a critical role in monitoring, analyzing, and responding to security incidents. You will be responsible for handling more complex security threats, guiding Level 1 engineers, and contributing to the overall security posture of the organization. This role requires strong technical expertise, excellent analytical skills, and the ability to work in a fast-paced environment

KEY RESPONSIBILITIES

• Advanced Threat Detection and Response: Monitor and analyze security alerts and incidents, conduct in-depth investigations, and respond to complex security threats, ensuring they are mitigated effectively.
• Incident Management: Take the lead in managing security incidents, coordinating with other IT and security teams to contain, eradicate, and recover from security breaches.
• Forensic Analysis: Perform detailed forensic analysis on compromised systems to identify root causes, attack vectors, and indicators of compromise (IOCs).
• Vulnerability Management: Assist in the identification, assessment, and remediation of vulnerabilities within the organization’s infrastructure.
• Security Tool Management: Maintain and optimize security tools and technologies, including SIEM, IDS/IPS, firewalls, and endpoint protection systems.
• Collaboration: Work closely with Level 1 SOC Engineers, providing guidance, mentorship, and training to help them improve their skills and effectiveness in responding to security incidents.
• Documentation: Create and maintain detailed documentation of security incidents, forensic analysis, and response actions, ensuring compliance with organizational policies and industry standards.
• Reporting: Generate and analyze security reports, providing insights and recommendations to improve the organization’s security posture.
• Continuous Improvement: Stay updated on the latest cybersecurity threats, vulnerabilities, and best practices, and contribute to the ongoing improvement of SOC processes and technologies.
• On-Call Support: Participate in a rotating on-call schedule to provide after-hours support for critical security incidents.

TECHNICAL REQUIREMENTS

Proven expertise in the following areas is required:

• Strong knowledge of security monitoring tools (e.g., SIEM, IDS/IPS) and their configuration and management.
• Proficiency in network security, endpoint security, and incident response techniques.
• Experience with forensic tools and methodologies for analyzing compromised systems.
• Familiarity with scripting and automation (e.g., Python, PowerShell) to streamline security processes.
• Knowledge of cloud security practices and tools (e.g., AWS, Azure) is a plus.

QUALIFICATIONS

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.
• Experience: 3-5 years of experience in a SOC or cybersecurity role, with at least 1-2 years at a Level 2 position or equivalent.
• Certifications: Relevant certifications such as CompTIA Security+, CompTIA CySA+, or equivalent are preferred.

Preferred Qualifications

• MSP background or experience managing security for multiple client environments.
• Experience with vulnerability management and patch orchestration tools

WORK SCHEDULE & LOCATION

• This is afull-time remote role, 7am – 4 pm EST Monday – Friday.

COMPENSATION

The salary range for this role is $80,000 - $85,000.

BENEFITS

• Competitive compensation
• Health Insurance (medical, vision, dental), 80% covered for employee-only plans and 75% covered for employee-spouse, employee-kids, and employee-family plans
• Flexible Spending Account (FSA)
• Health Savings Account (HSA)
• Employee Assistance Program (EAP)
• Retirement Plan (401(k)) with company match
• Short-Term Disability Insurance fully paid by the company
• Long-Term Disability Insurance fully paid by the company
• Life and AD&D Insurance, with optional Supplemental Life Insurance
• 10 Holidays
• 2 Floating Holidays

CTS participates in the E-Verify Program. As part of this program, the company provides the federal government with your Form I-9 information to confirm your employment eligibility in the United States.
Learn more at www.e-verify.gov (information available in English and Spanish).

CTS is proud to be an equal opportunity employer that celebrates diversity and is committed to creating an inclusive workplace with equal opportunity for all applicants and employees. Our goal is to recruit the most talented people from a diverse candidate pool regardless of race, color, ancestry, national origin, religion, disability, sex (including pregnancy), age, gender, gender identity, sexual orientation, marital status, veteran status, or any other characteristic protected by law.

CTS is committed to working with and providing access and reasonable accommodation to applicants. If you require an accommodation, please reach out to [e-mail] once you've begun the interview process. All requests for accommodations are treated discreetly and confidentially, as practical and permitted by law.