Tier 2 SOC Analyst with AI Tools Experience - REMOTE

Binary Defense; Houston (TX); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Remote-friendly work environment

Job summary

Binary Defense is seeking a Tier 2 SOC Analyst to serve as a hands-on contributor within the Security Operations team, focusing on detection strategy, rule tuning, and remediation. The role involves working with AI tools, SIEM/EDR platforms, and cross-functional feedback loops.

Responsibilities include alert strategy, reducing alert fatigue, and coordinating with the MDR provider’s Detection team to map detections to known frameworks and improve security posture.

Qualifications

• 3+ years in security operations or equivalent experience.
• Experience with AI tools.
• Experience mapping detections to SIEM/EDR and frameworks.
• Familiarity with attacker TTP trends.

Responsibilities

• Create alert strategy and documentation for identifying opportunities and prioritizing by threat level.
• Tune noisy alerts to reduce alert fatigue.
• Assess non-triggered alerts and adjust logic as needed.
• Serve as main contact to the MDR Provider’s Detection team.
• Work with Incident Responders on alert feedback and true/false positives.
• Establish reporting cadence for detections and tuned rules.
• Contribute to the Signal to Noise detection metric.
• Coordinate with MDR Threat Hunting to implement STAR rules.
• Map detections to Cyber Kill Chain.
• Lead on-call tuning and ongoing change management for remediation.
• Prioritize vulnerabilities and assist patch teams with root cause analysis.
• Analyze stale identities and admin privileges for improvements.

Skills

Security Operations

AI tools experience

SIEM

EDR

Threat intelligence

Tools

Splunk

Proofpoint

SentinelOne

SIEM

Job description

Job Type

Full-time

Binary Defense is seeking a Tier 2 SOC Analyst with Artificial Intelligence (AI) tools experience to serve as a hands-on contributor within the Security Operations team. This is a technical position responsible for transforming the client’s detection strategy, organizing detections, tuning rules, and creating and maintaining cross functional feedback loops. Additionally, leading analysis, design, and hands-on analysis and remediation for Attack Surface Reduction functions such as vulnerability management and penetration test remediation. You’ll play a key role in growing capabilities with leading tools such as AI, Splunk, Proofpoint, SentinelOne, and more. This role requires deep technical expertise, strong cross functional communication, and the ability to deliver operational results.

Responsibilities

• Create internal alert strategy and process documentation for how client identifies alerting opportunities, prioritizes based on threat level, with a focus and priority on gaps
• Review alerts that are too noisy to tune and drive down alert fatigue
• Assess alerts that haven’t triggered to determine whether logic needs to
• Be the main point of contact to the MDR Provider’s Detection team
• Work with the client’s Incident Responders on alert feedback loops; analyze true and false positive alerts
• Create regular reporting cadence for of all detections created, rules tuned
• Contribute to client’s homegrown "Signal to Noise ratio" detection metric
• Coordinate with MDR Threat Hunting team to request and implement Sentinel One STAR rules
• Map detections to standard frameworks such as the Cyber Kill Chain
• Work with MDR provider on an ongoing tuning of the on-call criteria
• Perform attack surface reduction including full-scope change management, cross functional coordination, enterprise communication planning/execution, execution of changes in support of security remediation
• Provide vulnerability prioritization and analysis, ticketing, reporting, trending, metrics, assistance to patch teams on troubleshooting root cause of patching challenges
• Analyze stale identities and accounts, admin privileges, and recommend and implement improvements

Requirements

• 3+ Years Security Operations or Equivalent Experience
• Artificial Intelligence (AI) tools experience.
• Experience with Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) tools
• Experience mapping detections to common frameworks and risk reduction models
• Familiarity with the latest trends in attacker TTPs

About Binary Defense

Binary Defense is a leading Managed Detection and Response (MDR) provider, trusted by hundreds of organizations to protect what matters most. Our team of SOC analysts, threat hunters, detection engineers, and threat researchers work around the clock to deliver proactive, risk-focused security outcomes. We bring the attacker's mindset to defense, helping clients detect threats earlier, respond faster, and continuously improve their security posture. For more information, visit our website, check out our blog, or follow us on LinkedIn.

Benefits

• Binary Defense offers competitive medical, dental and vision coverage for employees and dependents, a 401k match which vests every payroll, a flexible and remote friendly work environment, as well as training opportunities to expand your skill set (to name a few!).