SOC Analyst

Role Overview

We are seeking a Tier 2 SOC Analyst to provide critical support for statewide security monitoring, threat detection, incident response, and investigations. This role involves collaborating with state agencies to enhance the adoption of centralized security services and optimize SOC operations.

Key Responsibilities

• Analyze security event data from SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns and emerging threats.
• Conduct deep-dive analysis on suspicious activities, validate incidents, determine root causes, and escalate critical issues with detailed context for Tier 3 teams as needed.
• Create comprehensive incident reports, timelines, and post-incident summaries; contribute to lessons learned documentation and remediation recommendations.
• Investigate user-reported phishing attempts, malware infections, and policy violations while advising users on containment and recovery actions.
• Recommend updates to SOC playbooks and workflows, fine-tune detection rules, alert thresholds, and correlation logic to minimize false positives and improve threat coverage.
• Collaborate with engineering teams to ensure monitoring tools are properly configured; integrate new threat intelligence feeds into workflows using current TTPs for proactive threat hunting.
• Act as a customer-facing SME, demonstrating DIS service capabilities and resolving issues effectively.
• Document processes, run books, and troubleshooting steps related to SOC operations.