Tier II SOC Analyst

SYSTEMTEC; Columbia (SC); Remote; USD 70,000 - 110,000; Full time

Job summary

SYSTEMTEC is seeking a Tier II SOC Analyst for a remote opportunity to support enterprise security operations during EST hours. The role involves monitoring threats, investigating incidents, and strengthening detection and response within a large-scale SOC.

The ideal candidate will have 2+ years in threat analysis, incident response, dashboards, and SOC operations, with preference for certifications and experience with Cortex XSIAM/XDR and AD/VPN contexts.

Qualifications

• Requires 2+ years of threat analysis using MITRE ATT&CK framework.
• 2+ years creating security dashboards, metrics, and reports.
• 2+ years in security monitoring, threat detection, and incident response.
• Experience supporting large-scale Security Operations Center operations.
• Experience analyzing security events from SIEM, EDR, IDS/IPS, and threat intel sources.

Responsibilities

• Monitor and correlate security events across SIEM, EDR, IDS/IPS, and threat intel platforms.
• Investigate suspected security incidents, determine scope and root cause, and escalate high-priority findings.
• Respond to phishing reports, malware infections, and policy violations with containment and remediation.
• Produce incident reports, timelines, and post-incident summaries; suggest preventive measures.
• Refine alert thresholds, detection rules, and response playbooks; collaborate with engineering teams.
• Coordinate with agency reps, security engineers, and SOC staff to improve centralized services.

Skills

MITRE ATT&CK framework

Security dashboards & reports

Security monitoring & incident | e"

SOC operations

SIEM/EDR/IDS/IPS analysis

Root cause analysis & documentation

Communication & collaboration

Education

Associate degree in IT/InfoSec or related field

Tools

Palo Alto Cortex XSIAM/XDR

Active Directory / VPN technologies

Job description

SYSTEMTEC is seeking a Tier II SOC Analyst for a remoteopportunity for candidates working EST hours. Candidate will support enterprise security operations by monitoring threats, investigating security incidents, and strengthening detection and response capabilities within a large-scale Security Operations Center (SOC). This role will also collaborate with technical teams and participating agencies to improve security practices and expand the use of centralized security services.

Required Qualifications of the Tier II SOC Analyst:

• Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
• Associate degree in Information Technology, Information Security, or a related field; alternatively, four or more years of relevant professional experience may substitute for the degree.
• At least two years of experience working with the MITRE ATT&CK framework for threat analysis, detection, or investigations.
• Minimum of two years of experience creating security dashboards, analyzing metrics, and preparing reports.
• Two or more years of experience in security monitoring, threat detection, and incident response.
• At least two years of experience supporting large-scale Security Operations Center (SOC) operations.
• Experience analyzing security events from SIEM, EDR, IDS/IPS, and threat intelligence sources.
• Ability to investigate security incidents, determine root causes and impacts, document findings, and escalation critical threats appropriately.
• Strong analytical, troubleshooting, documentation, and communication skills, with the ability to collaborate across technical teams and organizational stakeholders.

Preferred Skills/Experience of the Tier II SOC Analyst:

• Advanced security certifications such as CISSP, CISA, CISO-related credentials, or equivalent qualifications.
• Additional certifications such as CEH, OSCP, GPEN, or relevant vendor-specific security credentials.
• Experience with Palo Alto Cortex XSIAM and/or XDR.
• Knowledge of firewall administration, VPN technologies, Active Directory, and intrusion detection/prevention systems.
• Familiarity with Linux, network administration, and network architecture.
• Experience with threat hunting, security playbooks, detection rule tuning, and reducing false-positive alerts.
• Preference for candidates based in Columbia, South Carolina, or surrounding areas who can accommodate onsite project needs.

Responsibilities of the Tier II SOC Analyst:

• Monitor and correlate security events across SIEM, EDR, IDS/IPS, and threat intelligence platforms to identify attack patterns, suspicious activity, and emerging threats.
• Investigate suspected security incidents, determine scope and root cause, assess potential impact, and escalation high-priority findings to Tier 3 analysts when appropriate.
• Respond to phishing reports, malware infections, and suspected policy violations by coordinating containment, remediation, and recovery activities.
• Produce incident reports, investigation timelines, and post-incident summaries; recommend preventive measures and improvements to security controls.
• Enhance SOC detection and response capabilities by refining alert thresholds, correlation rules, investigation workflows, and response playbooks; collaborate with engineering teams on monitoring tools and threat intelligence integration.
• Partner with agency representatives, security engineers, and SOC personnel to resolve issues, document operational procedures, promote centralized security services, and improve security operations.

Work Location:

Remote. EST Hours.

Full-Time Employment with SYSTEMTEC means competitive compensation, access to health, dental, disability, and life coverage, and 401(k) with match.

***Please note: SYSTEMTEC is not set up to employ workers in the states of California, New York, and New Jersey.***