SOC Mid-Level Analyst

Everforth ECS; United States; Remote; USD 85,000 - 135,000; Full time

Job summary

Everforth ECS is seeking a SOC Mid-Level Analyst to support a mature 24x7 SOC in a remote capacity. The role emphasizes ingesting, correlating, normalizing, and analyzing event data to rapidly identify IoCs and respond to incidents.

The ideal candidate has 5+ years in log data analysis for intrusion or information security operations, a bachelor's degree or equivalent, and experience with SIEM content and multiple CIRT tools. Certifications and cloud security knowledge are a plus.

Qualifications

• Minimum of 5 years experience analyzing log data in intrusion analysis or information security operations.
• Ability to build content in SIEM systems.
• Experience with two or more analysis tools used in a CIRT or similar investigative environment.
• Ability to analyze and triage IoCs.

Responsibilities

• Continuously monitors SIEM and on-premises infrastructure/cloud applications for security events and threats.
• Responds to incidents with containment, remediation, and recovery actions.
• Documents lessons learned from post-incident reviews to improve controls and procedures.
• Tunes alerts with SIEM engineering for better fidelity; assists with SOAR playbooks and automated workflows.
• Performs proactive threat hunting to identify emerging threats and risks.

Skills

Threat hunting

Security operations

Cloud security

CSF knowledge

MITRE ATT&CK

IoC analysis

Education

Bachelor's degree or equivalent

Tools

SIEM platforms

Job description

ECS is seeking aSOC Mid-Level Analystto workremotely.

ECS is seeking a Mid-Level SOC Analyst with demonstrated experience supporting the development of processes, procedures, and automations to rapidly ingest, aggregate, correlate, normalize, and analyze event messages to rapidly and assuredly identify and respond to Indicators of Compromise (IoC). The ideal candidate is a critical thinker and perpetual learner who is excited to solve some of our clients’ toughest challenges. To be successful the candidate must have experience working in a mature 24x7x365 Security Operation Center.

Shift schedule:Sunday-Thursday, 12:00AM - 8:00AM ET(subject to change)

Responsibilities include:

• Continuously monitors SIEM and on-premises infrastructure/cloud applications for security events to threats & intrusions, including:
• Phishing email inbox
• Intel feeds via email and other sources (i.e., US-CERT, MS-ISAC)
• Participates with responding to and handling all critical incident activity. Ensure the execution of proper containment, remediation, and recovery activities.
• Assesses and documents lessons learned as part of post-incident review, such as unsuccessful controls, outdated procedures, or incomplete remediation actions.
• Coordinates with SIEM engineering to tune security events and alerts for improving alert fidelity.
• Assists with creating and tuning Security Orchestration and Automation (SOAR) playbooks and automated workflows.
• Performs proactive threat hunting to identify and characterize new emerging threats, vulnerabilities, and risks.
• Works closely with Cyber Threat Intel to provide information on detection patterns for new upcoming threats
• Compiles threat hunt reports as requested on any specific hunt/threat inquiry and disseminate to SOC leadership.

Conducts research and document events of interest within the scope of Cybersecurity.

• Minimum of 5 years experience conducting analysis of log data in support of intrusion analysis or information security operations.
• Bachelors degree or equivalent with relevant certifications.
• Experience with two or more analysis tools used in a CIRT or similar investigative environment.
• Ability to build content in SIEM system.
• Ability to analyze and triage IoCs.

Desired Skills

• Strong analytical mindset with an open and engaging personality
• Cloud security, threat hunting, security operations
• Knowledge of the Cybersecurity Framework (CSF) and MITRE ATT&CK Framework
• Preferred Certifications (one or more):
• Certified Ethical Hacker (CEH)
• Certified Information System Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• CompTIA Security+
• Computer Hacking Forensic Investigator (CHFI)

Our Company

Our Culture

Employer Privacy Policy

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

Meet the challenge. Make a difference with Everforth ECS!

EEO is the Law

ADP Privacy Statement Artificial Intelligence Google Privacy Policy Google Terms of Service