Tier 2 SOC Analyst: Threat Detection & Incident Response

United Global Technologies, Inc.; Columbia (SC); On-site; USD 70,000 - 95,000; Full time

Job summary

United Global Technologies, Inc. seeks a Tier 2 SOC Analyst to monitor security events, investigate incidents, and support state agencies in adopting centralized security services. The role focuses on threat detection, incident response, and reporting, with a 12-month engagement that may extend.

Onsite preference is given, with full-time work on-site and remote options only as needed. Strong collaboration with engineering and agency staff is required.

Qualifications

• 2+ years of experience with security monitoring and incident response.
• 2+ years of experience with MITRE ATT&CK framework.
• 2+ years of experience with dashboard creation and reporting.

Responsibilities

• Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intel to identify complex attack patterns and incidents.
• Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate to Tier 3 with context.
• Create incident reports, timelines, and post-incident summaries; contribute to lessons-learned docs and remediation recommendations.
• Investigate phishing, malware infections, and policy violations; advise on containment and recovery actions.
• Recommend updates to SOC playbooks and workflows; fine-tune detection rules, thresholds, and correlation logic.

Skills

Security monitoring

Incident response

MITRE ATT&CK

Education

Associate’s degree in information technology or information security

4 years relevant work experience (substitution allowed)

2 years in large SOC operations

Tools

Palo Alto Cortex XSIAM/XDR

Job description

United Global Technologies, Inc. seeks a Tier 2 SOC Analyst to monitor security events, investigate incidents, and support state agencies in adopting centralized security services. The role focuses on threat detection, incident response, and reporting, with a 12-month engagement that may extend.

Onsite preference is given, with full-time work on-site and remote options only as needed. Strong collaboration with engineering and agency staff is required.