SOC Incident Responder

Aspire Technology Partners, LLC.; United States; On-site; USD 85,000 - 135,000; Full time

Job summary

Aspire Technology Partners, LLC. seeks an Incident Responder for its Security Operations Center to investigate and respond to incidents across managed services clients.

You will correlate data from security sources, determine scope and impact, and guide containment and remediation with internal teams and customers. Responsibilities include advanced SIEM queries, AI-assisted investigations, and clear incident narratives to support actions taken.

Qualifications

• Bachelor’s Degree required.
• 3-5 years in Security Incident Response and security experience.
• Knowledge of event/alert management, incident management, and change management processes.

Responsibilities

• Investigate security incidents and document investigations and findings.
• Create advanced queries in SIEM and XDR to identify, scope, and troubleshoot issues.
• Coordinate containment, remediation, and recovery actions with customers and internal teams.
• Escalate complex investigations to SOC Level 2 and document SLAs.
• Maintain detailed incident notes, timelines, and resolution activities.

Skills

Security incident response

Threat analysis

SIEM investigation

Threat intelligence

OSINT

AI-assisted investigation

Education

Bachelor’s Degree

Tools

Exabeam

ServiceNow

Job description

The Security Operations Center (SOC) Incident Responder provides advanced investigation, response, and escalation support for security incidents affecting Aspire Technology Partners’ Managed Services Clients. Primary responsibilities include correlating data from multiple security and telemetry sources; determining the scope, impact, and severity of potential compromise; performing advanced analysis; coordinating containment and remediation activities; providing recommendations to customers and internal teams; and serving as an escalation point for SOC Level 1 and Level 2 analysts.

The Incident Responder uses SIEM, endpoint/XDR, network security, threat intelligence, OSINT, and AI-assisted investigation tools to investigate incidents and take immediate action or recommend an appropriate course of action to safeguard Aspire’s Managed Services Clients. The Incident Responder will document investigations and create clear narratives that support conclusions and actions taken; distinguish true security incidents from false positives and expected activity; track investigations through resolution; communicate with customers and internal teams; and support the continued development of detection, response, and containment procedures.

ESSENTIAL DUTIES AND RESPONSIBILITIES- MAY INCLUDE THE FOLLOWING: OTHER DUTIES MAY BE ASSIGNED.

• Ensure SOC security incidents and cases are investigated, documented, escalated, and resolved within established SLAs and operational procedures
• Stay current with security vulnerabilities, threat actor techniques, attacks, indicators of compromise, and defensive countermeasures
• Investigate and provide advanced technical analysis of security incidents and suspected compromise across customer environments
• Create and run advanced queries in SIEM, endpoint/XDR, and other security platforms to identify, scope, and troubleshoot security issues
• Correlate telemetry from multiple sources, including endpoint, identity, email, network, cloud, and security platforms, to determine incident scope and impact
• Use threat intelligence, OSINT, and AI-assisted investigation and analysis tools to enrich investigations and accelerate incident response
• Provide recommendations and support for containment, remediation, and recovery actions, including malware and account-compromise incidents
• Open, track, update, and close security incidents and cases in ServiceNow in accordance with SOC documentation standards
• Serve as an escalation point for SOC Level 1 and Level 2 analysts and provide guidance during complex investigations
• Work directly with other SOC Incident Responders, SOC Engineering, DevOps, NOC Engineers, and other internal teams as required for issue resolution
• Provide clear and timely communication to customers and affected stakeholders regarding security incidents, investigation status, recommended actions, and resolution
• Maintain detailed investigation notes, evidence, timelines, findings, and resolution activities within operational management systems
• Maintain customer technical information and incident-response documentation in accordance with defined documentation standards
• Support the development and improvement of detections, investigation procedures, runbooks, containment processes, and response workflows
• Assess and recommend appropriate security solutions, integrations, and operational improvements based on incident findings and recurring threats
• Prepare SOC and incident-response reports as required and communicate findings to customers, peers, team members, and management
• Obtain and maintain technical or professional certifications applicable to the position or as directed
• Provide emergency on-call support on a rotating schedule
• Perform other duties as assigned

Requirements

MINIMUM EDUCATION AND EXPERIENCE:

• Bachelor’s Degree
• 3-5 years of Security Incident Response and security experience
• Knowledge and understanding of event/alert management, incident management, and change management processes

PREFERRED EDUCATION AND EXPERIENCE:

• 5+ years of experience working in a NOC or SOC
• 5+ years of networking and/or security experience
• Experience with Security Management and SIEM platforms (e.g., Exabeam)
• Experience with endpoint/XDR, identity, email, network, and cloud security investigation technologies
• Experience utilizing OSINT, threat intelligence, and AI-assisted security investigation and analysis tools