SOC Analyst

Opportunity

Work pattern

• The role is explicitly described as onsite.
• Rotational shifts operate in a 24×7 follow-the-sun model.

Responsibilities

• Monitor real-time network, endpoint, and cloud security alerts using SIEM queries and threat-analysis tools.
• Identify, declare, document, and escalate incidents under response playbooks; support containment and remediation.
• Investigate and remediate phishing, malware, spoofing, and email threats; manage endpoint security through EDR workflows and MDM policies.
• Provide first-line IT help for password resets, account unlocks, hardware provisioning, email and collaboration issues, and application access.
• Maintain tickets, case notes, and incident summaries; improve runbooks, process documentation, and knowledge articles.
• Monitor brand impersonation, fraudulent domain registrations, and social-engineering threats; validate honeytoken decoys for lateral-movement attempts.

Required experience and skills

• At least 2 years' hands-on experience in a SOC, security monitoring, or incident-response role, including alert triage, investigation, and response.
• Experience investigating data-exfiltration indicators, unusual transfers or data volumes, credential harvesting, and unauthorized cloud-service access.
• Understanding of networks (IP, DNS, ports, protocols), macOS endpoints, and IAM, SSO, and MFA.
• Experience with MITRE ATT&CK, incident-command models, and ticketing tools such as Jira, Linear, or similar.
• Strong documentation discipline, clear incident summaries and shift notes, reliable follow-through, analytical problem-solving, and escalation judgment.

Preferred qualifications

• A bachelor's degree in cybersecurity, computer science, or information technology is nice to have.
• Okta proficiency for SSO, authentication, admin-console operations, and user access is highly preferred.
• Jamf experience and exposure to Google SecOps, DoControl, Code42, or Cloudflare email security are nice to have.

Benefits and work culture

• The posting lists equity, pension contributions, flexible time off, parental leave, healthcare, wellness, training, AI tools, and other location-dependent benefits.
• The company describes AI tools as part of its operating model and says hiring decisions are ultimately made by humans.