SOC Incident Responder

Optimum; Norwalk, Northern (CT, KY); Hybrid; USD 75,000 - 110,000; Full time

Job summary

Optimum is seeking a Security Incident Responder to safeguard our digital assets and monitor, detect, and respond to threats in real-time. You will play a critical role in maintaining the integrity and availability of our systems and data.

Join a team focused on staying ahead of cyber threats, refining detection logic, and coordinating rapid incident response. This role may involve 24x7 shift-based rotations to ensure continuous protection.

Qualifications

• Bachelor’s degree or equivalent work experience.
• Security certifications such as Security+, GCIH, GCIA are desirable.
• 1–3 years IT experience, with 1–3 years in security operations.

Responsibilities

• Monitor security alerts and events from SIEM, IDS/IPS, antivirus, and EDR.
• Triage alerts and prioritize incidents by severity and impact.
• Coordinate containment, eradication, and recovery actions in incidents.

Skills

AI Tools familiarity

Security monitoring

Incident triage

Analytical thinking

Education

Bachelor’s degree in Computer Science or related field

Tools

SIEM

EDR

IDS/IPS

Job description

Select how often (in days) to receive an alert:

Location:

Norwalk, CT, US, 06851

Brand: Optimum

Requisition #: 12033

We are Optimum, a leader in the fast-paced world of connectivity, and we're seeking driven and enthusiastic professionals to join our team, empower lives, fuel businesses, and drive innovation. Connectivity is no longer a luxury, but a necessity. A career at Optimum means you'll be enabling progress and enhancing lives by providing reliable, high-speed connectivity solutions that keep the world connected. Our successes, now and in the future, are powered by our amazing product, a commitment to our people and culture, and the connections we make in our communities.

If you are resourceful, collaborative, and passionate about delivering consistent excellence, Optimum is for you!

Job Summary

As a Security Incident Responder, you will be at the forefront of our organization's cyber defense efforts, responsible for monitoring, detecting, and responding to security incidents in real-time. You will play a crucial role in safeguarding our digital assets, identifying emerging threats, and ensuring the integrity and availability of our systems and data.

Responsibilities

Security Monitoring and Alert Triage:

• Monitor security alerts and events generated by various security tools, including SIEM, IDS/IPS, antivirus, and endpoint detection and response (EDR) systems.
• Analyze and triage security alerts to identify potential security incidents, prioritizing them based on severity, relevance, and potential impact.
• Monitor across on-premises and cloud environments using the organization's SIEM, EDR, email security, and other security monitoring tooling.

Incident Response and Remediation:

• Collaborate with incident responders to coordinate and execute incident response procedures, including containment, eradication, and recovery efforts.
• Take immediate action to mitigate security incidents, such as isolating compromised systems, blocking malicious traffic, and applying security patches or updates.
• Document incident response activities, including timelines, actions taken, and lessons learned, to support post-incident analysis and reporting.

Threat Intelligence and Detection Enhancement:

• Stay abreast of the latest cyber threats, vulnerabilities, and attack techniques through threat intelligence sources and industry reports.
• Enhance detection capabilities by developing and refining correlation rules, signatures, and detection logic within the SIEM platform.
• Contribute to the continuous improvement of SOC processes, procedures, and tools to enhance the organization's cyber defense posture.

Qualifications

• Bachelor’s degree in Computer Science or related field or equivalent work experience.
• Relevant industry certifications such as Security+, GCIH, or GCIA are desirable.
• Minimum 1-3 years' experience in Information Technology preferred.
• Minimum 1-3 years of direct IT Security experience in Security Operations preferred.
• Familiarity with AI Tools and AI First mindset
• Foundational knowledge of networking and application protocols (TCP/IP, DNS, HTTP/S, ICMP) and the ability to interpret related security alerts.
• Familiarity with the MITRE ATT&CK framework and the NIST incident response lifecycle (NIST SP 800-61).
• Strong written communication skills for clear, concise, business-friendly incident documentation and escalation.
• Willingness to work in a 24x7 shift-based rotation, including nights, weekends, and holidays.

At Optimum, every action and interaction we take part in, is driven by our three Guiding Principles: Do What’s Right, Drive One Optimum, and Make It Happen. These aren’t just words, they help us build trust, create real community, and embrace new ways of thinking. Our employees are empowered to do the right thing for our customers and co-workers and to recognize and reward these behaviors when we see them. It’s all part of the bigger picture of “Be The Difference” where each employee knows they have the power to enact real change, share new ideas, and understand that learning never stops.

All job descriptions and required skills, qualifications and responsibilities for a particular position are subject to modification by the Company from time to time, in the Company’s discretion based on business necessity.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, national origin, religion, age, disability, sex, sexual orientation, gender identity or protected veteran status, or any other basis protected by applicable federal, state, or local law. The Company provides reasonable accommodations upon request in accordance with applicable requirements.

Optimum collects personal information about its applicants for employment that may include personal identifiers, professional or employment related information, photos, education information and/or protected classifications under federal and state law. This information is collected for employment purposes, including identification, work authorization, FCRA-compliant background screening, human resource administration and compliance with federal, state, and local law.

Nearest Major Market: Bridgeport
Nearest Secondary Market: Danbury