Information Security Analyst I / SOC Analyst

Job Title: Information Security Analyst I / SOC Analyst

Work Arrangement: Hybrid, up to 3 days onsite per week

Interview Process: Microsoft Teams

Position Summary

Our client is seeking a motivated Security Operations Center (SOC) Analyst to join its cybersecurity team. This individual will monitor and investigate potential security threats, respond to incidents, analyze security events, and help strengthen the organization’s overall security posture.

The ideal candidate will have a strong understanding of cybersecurity fundamentals, hands-on experience with security monitoring technologies, and the ability to investigate and respond to evolving threats.

Responsibilities

• Monitor network traffic, system logs, endpoints, and security platforms for suspicious or unusual activity.
• Identify, investigate, categorize, and respond to cybersecurity incidents.
• Triage security alerts and prioritize incidents based on severity and potential impact.
• Conduct proactive threat hunting using SIEM and endpoint detection platforms.
• Analyze logs from firewalls, intrusion detection systems, antivirus tools, endpoints, and other security technologies.
• Operate and support security tools including SIEM, IDS/IPS, firewalls, PKI, and endpoint security platforms.
• Investigate malware, potential data breaches, insider threats, and other security events.
• Maintain accurate documentation related to incidents, investigations, and remediation activities.
• Support compliance with applicable security standards, policies, and procedures.
• Collaborate with cybersecurity, infrastructure, and IT teams to resolve security issues.
• Assist with improving detection rules, monitoring processes, and incident response procedures.
• Stay current on emerging cyber threats, vulnerabilities, and attack techniques.

Required Skills

• Strong understanding of operating systems, networking, security fundamentals, and common network protocols.
• Hands-on experience with SIEM platforms and security monitoring tools.
• Experience with IDS/IPS, firewalls, antivirus, and endpoint detection and response technologies.
• Experience analyzing security logs and identifying suspicious patterns or anomalies.
• Knowledge of incident response and security investigation processes.
• Understanding of threat intelligence, common attack techniques, and cybersecurity threats.
• Basic knowledge of digital forensics and incident investigation.
• Experience with scripting or automation using Python, PowerShell, or similar technologies.
• Strong analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to work effectively in a fast-paced security operations environment.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Previous experience in cybersecurity, information security, SOC operations, or a related technical security role.
• Security certifications such as CompTIA Security+ or equivalent are preferred.