Security Operations Center Analyst

Security Operations Center Analyst – L1 (AI-Assisted Monitoring)

Clearwater Paper is seeking a SOC Analyst (L1) to join their security operations team, working within an AI-enhanced monitoring environment. This role involves collaborating with automated systems for alert triage. The analyst will serve as the primary defense, responsible for validating, documenting, and escalating security events to protect the company's manufacturing and corporate infrastructure.

About the Role:

As a SOC Analyst – L1 with 7+ years of experience, you will be instrumental in monitoring security alerts from SIEM and AI-driven systems. Your key responsibilities include performing initial alert triage to differentiate between false positives and genuine threats, promptly escalating confirmed incidents to L2 analysts or the SOC Lead, and maintaining detailed documentation of all security events. You will also contribute to refining alert quality and reducing 'noise' through feedback loops with the engineering team, while adhering to established security frameworks and incident classification protocols.

Key Responsibilities:

• Continuous monitoring of security alerts from SIEM and AI-driven alerting systems.
• Alert triage and validation to identify genuine threats.
• Prompt escalation of confirmed security incidents.
• Detailed documentation of alerts, findings, and actions taken.
• Contributing to alert optimization and noise reduction.
• Adherence to security frameworks and incident classification protocols.

Required Experience & Skills:

• 7+ years of professional experience in a SOC or Security Monitoring environment.
• High familiarity with SIEM tools, preferably Splunk.
• Solid understanding of Endpoint Detection and Response (EDR) platforms (e.g., CrowdStrike) and vulnerability management tools.
• Exceptional attention to detail and a disciplined approach to security operations and reporting.
• Strong verbal and written communication skills for reporting to US-based stakeholders.

Preferred Qualifications:

• Previous exposure to AI-driven monitoring environments or automated orchestration (SOAR).
• Deep understanding of industry-standard security frameworks and precise incident classification.

Operational Requirements:

• This role operates during EST business hours to align with US stakeholders.
• Must be available for 24x7 escalation support for critical security events.
• 1 Open Position.

Join Clearwater Paper to be at the forefront of digital transformation, utilizing AI-assisted tools to combat modern cyber threats and contribute to a company that values high performance and technological curiosity.