SOC Engineer (Level 2)

charterts; United States; Remote; USD 80,000 - 85,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

HSA/FSA options

Job summary

charterts is seeking a Level 2 Engineer to join our Security Operations Center in a full-time remote role. You will own complex threat investigations, lead incident response efforts, and mentor junior analysts across multiple client environments.

The position runs Monday–Friday, 7am–4pm EST. Bring 3–5 years in SOC, strong SIEM/IDS experience, forensic tooling, and scripting skills (Python/PowerShell). A degree in cybersecurity or IT is preferred.

Qualifications

• 3–5 years in SOC/cybersecurity with 1–2 years at Level 2.
• Experience with SIEM/IDS/IPS config and management.
• Proficient in Python or PowerShell scripting.
• Bachelor’s degree in cybersecurity or IT; Security+ or CySA+ preferred.

Responsibilities

• Monitor, analyze, and respond to escalated security alerts and conduct deep investigations.
• Lead incident management across IT and security teams to resolve breaches.
• Perform forensic analysis to identify root causes and IOC.
• Support vulnerability management across infrastructure.
• Maintain and tune SIEM, IDS/IPS, firewalls, and endpoint protection.
• Document incidents and produce reports with actionable recommendations.

Skills

SIEM/IDS knowledge

Network security

Endpoint security

Incident response

Forensic tools

Python

PowerShell

Education

Bachelor's degree in cybersecurity

Security+ / CySA+

Job description

Role overview

Join a Security Operations Center as a Level 2 Engineer, where you will take ownership of complex threat investigations, lead incident response efforts, and mentor junior analysts. This is a full-time remote position scheduled Monday through Friday from 7am to 4pm EST, supporting mission-driven organizations across multiple client environments.

Responsibilities

• Monitor, analyze, and respond to escalated security alerts, conducting deep investigations into advanced threats and coordinating containment, eradication, and recovery.
• Lead incident management activities, working across IT and security teams to drive resolution of breaches and minimize business impact.
• Perform forensic analysis on compromised systems to identify root causes, attack vectors, and indicators of compromise.
• Support vulnerability management by identifying, assessing, and helping remediate weaknesses across infrastructure.
• Maintain and tune security tooling such as SIEM, IDS/IPS, firewalls, and endpoint protection platforms.
• Document incidents, produce security reports with actionable recommendations, and participate in a rotating on-call schedule for after-hours support.

Requirements

• 3-5 years of experience in a SOC or cybersecurity role, with at least 1-2 years at a Level 2 level or equivalent.
• Strong knowledge of security monitoring tools (SIEM, IDS/IPS) including configuration and management.
• Proficiency in network security, endpoint security, and incident response techniques.
• Hands-on experience with forensic tools and methodologies for compromised system analysis.
• Familiarity with scripting and automation (e.g., Python, PowerShell).
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience; certifications such as Security+ or CySA+ are preferred.

Nice to have

• Background working in a managed services environment supporting multiple clients.
• Experience with vulnerability management and patch orchestration tools, plus cloud security knowledge (AWS, Azure).

Benefits and work setup

• Salary range of $80,000-$85,000.
• Health insurance (medical, vision, dental) with significant employer coverage, plus FSA and HSA options.
• 401(k) with company match, commuter benefits, and an Employee Assistance Program.
• Company-paid short- and long-term disability, life and AD&D insurance with supplemental options.
• Paid time off including parental leave, ten holidays, and two floating holidays.