SOC Engineer (Level 2)

CTS; United States; Remote; USD 80,000 - 85,000; Full time

Benefits offered by this job

Health Insurance

401(k) match

Paid Time Off

HSA

EAP

Commuter Benefits

Disability Insurance

Parental Leave

Job summary

CTS is seeking an experienced Level 2 SOC Engineer to join our Security Operations Center. You will monitor, analyze, and respond to security incidents, guiding Level 1 engineers and strengthening our security posture in a fast-paced environment.

The role requires strong technical expertise, hands-on experience with SIEM/IDS/IPS, and the ability to mentor junior staff. This full-time remote position follows EST hours and offers comprehensive benefits.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experience.
• 3–5 years in a SOC or cybersecurity role, with 1–2 years at Level 2 or equivalent.
• Relevant certifications such as CompTIA Security+ or CySA+ are preferred.

Responsibilities

• Monitor and analyze security alerts and incidents, and respond to complex threats.
• Lead security incidents, coordinate with IT and security teams to contain and recover.
• Perform forensic analysis to identify root causes and IOC.
• Maintain and optimize security tools (SIEM, IDS/IPS, firewalls).
• Document security incidents and responses, ensuring policy compliance.
• Generate security reports and provide improvement recommendations.

Skills

Security monitoring

Network security

Forensic analysis

Scripting (Python, PowerShell)

Cloud security

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

SIEM

IDS/IPS

Firewalls

Endpoint protection

Job description

CTS delivers comprehensive IT solutions to meet the unique demands of mission-driven organizations. We have deep expertise in supporting nonprofits and educational institutions, however our team is equipped to handle the complexities of IT across a variety of sectors. We’re committed to making technology work seamlessly, so our clients can focus on making a difference, regardless of their industry.

At CTS, we believe in building a company culture that fosters growth, collaboration, and innovation. By joining our team, you will not only help empower businesses with cutting-edge IT solutions but also build a rewarding career in a dynamic and supportive environment. Discover the many reasons why CTS is a great place to advance your career. We are headquartered in Brooklyn, NY with 90+ employees across the US and several other countries. Learn more about us at https://www.charterts.com

JOB SUMMARY

We are looking for an experienced SOC Engineer - Level 2 to join our Security Operations Center (SOC) team. As a Level 2 SOC Engineer , you will play a critical role in monitoring, analyzing, and responding to security incidents. You will be responsible for handling more complex security threats, guiding Level 1 engineers, and contributing to the overall security posture of the organization. This role requires strong technical expertise, excellent analytical skills, and the ability to work in a fast-paced environment

KEY RESPONSIBILITIES

• Advanced Threat Detection and Response: Monitor and analyze security alerts and incidents, conduct in-depth investigations, and respond to complex security threats, ensuring they are mitigated effectively.
• Incident Management: Take the lead in managing security incidents, coordinating with other IT and security teams to contain, eradicate, and recover from security breaches.
• Forensic Analysis: Perform detailed forensic analysis on compromised systems to identify root causes, attack vectors, and indicators of compromise (IOCs).
• Vulnerability Management: Assist in the identification, assessment, and remediation of vulnerabilities within the organization’s infrastructure.
• Security Tool Management: Maintain and optimize security tools and technologies, including SIEM, IDS/IPS, firewalls, and endpoint protection systems.
• Collaboration: Work closely with Level 1 SOC Engineers,providing guidance, mentorship, and training to help them improve their skills and effectiveness in responding to security incidents.
• Documentation: Create and maintain detailed documentation of security incidents, forensic analysis, and response actions, ensuring compliance with organizational policies and industry standards.
• Reporting: Generate and analyze security reports, providing insights and recommendations to improve the organization’s security posture.
• Continuous Improvement: Stay updated on the latest cybersecurity threats, vulnerabilities, and best practices, and contribute to the ongoing improvement of SOC processes and technologies.
• On-Call Support: Participate in a rotating on-call schedule to provide after-hours support for critical security incidents.

TECHNICAL REQUIREMENTS

Proven expertise in the following areas is required:

• Strong knowledge of security monitoring tools (e.g., SIEM, IDS/IPS) and their configuration and management.
• Proficiency in network security, endpoint security, and incident response techniques.
• Experience with forensic tools and methodologies for analyzing compromised systems.
• Familiarity with scripting and automation (e.g., Python, PowerShell) to streamline security processes.
• Knowledge of cloud security practices and tools (e.g., AWS, Azure) is a plus.

QUALIFICATIONS

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.
• Experience: 3-5 years of experience in a SOC or cybersecurity role, with at least 1-2 years at a Level 2 position or equivalent.
• Certifications: Relevant certifications such as CompTIA Security+, CompTIA CySA+, or equivalent are preferred.

Preferred Qualifications

• MSP background or experience managing security for multiple client environments.
• Experience with vulnerability management and patch orchestration tools

WORK SCHEDULE & LOCATION

• This is a full-time remote role, 7am – 4pm EST Monday – Friday.

COMPENSATION

The salary range for this role is $80,000 - $85,000.

BENEFITS

• Competitive compensation
• Health Insurance (medical, vision, dental), 80% covered for employee-only plans and 75% covered for employee-spouse, employee-kids, and employee-family plans
• Flexible Spending Account (FSA)
• Health Savings Account (HSA)
• Employee Assistance Program (EAP)
• Retirement Plan (401(k)) with company match
• Commuter Benefits
• Short-Term Disability Insurance fully paid by the company
• Long-Term Disability Insurance fully paid by the company
• Life and AD&D Insurance, with optional Supplemental Life Insurance
• Paid Time Off, including Paid Parental Leave
• 10 Holidays
• 2 Floating Holidays

CTS participates in the E-Verify Program. As part of this program, the company provides the federal government with your Form I-9 information to confirm your employment eligibility in the United States. Learn more at www.e-verify.gov (information available in English and Spanish).

THE INTERVIEW PROCESS

We aim to move fast. You’ll receive scheduling emails from [e-mail] through Greenhouse.

Depending on the role, some steps may be adjusted or added - we’ll let you know upfront!

1. Screening call with a member of our HR team (30 minutes)
2. Technical interview with the Hiring Manager (45 minutes)
3. Panel interview with the Hiring Manager and Department Director (60 minutes)
4. (If applicable) Executive interview

CTS is proud to be an equal opportunity employer that celebrates diversity and is committed to creating an inclusive workplace with equal opportunity for all applicants and employees. Our goal is to recruit the most talented people from a diverse candidate pool regardless of race, color, ancestry, national origin, religion, disability, sex (including pregnancy), age, gender, gender identity, sexual orientation, marital status, veteran status, or any other characteristic protected by law.

CTS is committed to working with and providing access and reasonable accommodation to applicants. If you require an accommodation, please reach out to [e-mail] once you’ve begun the interview process. All requests for accommodations are treated discreetly and confidentially, as practical and permitted by law.