Tier 2 SOC Analyst — Remote, Flexible, Impactful

Binary Defense; Houston (TX); Hybrid; USD 70,000 - 95,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401k match

Remote-friendly work environment

Training opportunities

Job summary

Binary Defense is seeking a client-facing Tier 2 SOC Analyst to serve on a client’s Security Operations team. This hands-on role transforms detection strategy, tunes rules, and maintains feedback loops. You’ll lead analysis for Attack Surface Reduction functions, including vulnerability management and remediation from penetrations tests.

You’ll work with tools like Splunk, Proofpoint, and SentinelOne, delivering operational results and coordinating with the MDR provider’s Detection team.

Qualifications

• 5+ years of Security Operations or equivalent experience.
• Experience mapping detections to frameworks and risk-reduction models.
• Familiarity with current attacker TTPs and hands-on detection tuning.

Responsibilities

• Create internal alert strategy and process documentation for alerting opportunities and prioritization.
• Tune noisy alerts to reduce alert fatigue and improve signal-to-noise.
• Be the main contact to the MDR provider’s Detection team and coordinate with Threat Hunting.
• Analyze alerts with Incident Responders, generate regular detection reports and metrics.
• Coordinate with on-call criteria and perform attack surface reduction activities.
• Prioritize vulnerabilities and assist patch teams in troubleshooting root causes.
• Map detections to the Cyber Kill Chain and maintain defense of client environments.

Skills

SIEM

EDR

Threat mapping

TTP awareness

Incident response

Tools

Splunk

Proofpoint

SentinelOne

Job description

Binary Defense is seeking a client-facing Tier 2 SOC Analyst to serve on a client’s Security Operations team. This hands-on role transforms detection strategy, tunes rules, and maintains feedback loops. You’ll lead analysis for Attack Surface Reduction functions, including vulnerability management and remediation from penetrations tests.

You’ll work with tools like Splunk, Proofpoint, and SentinelOne, delivering operational results and coordinating with the MDR provider’s Detection team.