SOC Security Specialist — Hybrid

Ericsson; Plano (TX); Hybrid; USD 120,000 - 165,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Parental leave

Job summary

Ericsson is seeking a Security Specialist to join our global Cyber Defense Center in the United States, a hybrid role with four days in the office and specific CT work hours (10:30 AM – 6:30 PM CT, 11:30 AM – 7:30 PM CT during DST). The team monitors, triages, and investigates alerts 24/7 from a SOC, Threat Intelligence, Incident Response, and more.

You will work with AI systems to automate repetitive tasks and drive improvements in detection engineering and automation.

Qualifications

• 7+ years of experience in triage, incident response, and detection engineering within a SOC environment.
• Proficiency with EDR, ITDR, cloud security, SIEM, and exposure management tooling; CrowdStrike Falcon experience preferred
• Broad technical knowledge across cloud platforms (AWS, GCP, Azure), Linux, Windows, networking, and identity management, with deep expertise in at least one area
• Strong understanding of threat actor TTPs, with the ability to recognize indicators in telemetry and logs and determine investigative next steps
• A growth mindset, genuine passion for cybersecurity, and a drive to continuously learn and improve without complacency
• Composure and resilience under pressure, with the ability to stay focused during high-stress situations and collaborate effectively with the team
• Strong professional integrity and commitment to handling confidential information with discretion
• Preferred certifications: SANS/GIAC — GCFA, GCFE, GCIA, GCIH, and/or GCFR

Responsibilities

• Triage and respond to prioritized alerts in a follow-the-sun SOC model, validating true/false positives, assessing malicious activity, and responding per established plans; elevate advanced threat activity to the Incident Response team and support scoping, containment, and eviction.
• Collaborate with agentic AI systems (commercial and in-house) that automate repetitive tasks, enabling focus on analytical work.
• Contribute to SOC improvement and automation, including detection engineering, reinforcement learning, Falcon Fusion workflows, and Foundry app development.
• Continuously develop skills through Immersive Labs, on-the-job training, quality review sessions, conferences, and peer collaboration.

Skills

SOC experience

Threat detection

Cloud security

Cybersecurity fundamentals

Tools

CrowdStrike Falcon

SIEM tools

EDR tooling

Cloud platforms (AWS/GCP/Azure)

Job description

Ericsson is seeking a Security Specialist to join our global Cyber Defense Center in the United States, a hybrid role with four days in the office and specific CT work hours (10:30 AM – 6:30 PM CT, 11:30 AM – 7:30 PM CT during DST). The team monitors, triages, and investigates alerts 24/7 from a SOC, Threat Intelligence, Incident Response, and more.

You will work with AI systems to automate repetitive tasks and drive improvements in detection engineering and automation.