Senior SOC Analyst

Large rollouts are routine here, such as imaging 12,000 laptops for a state agency over one summer. Tickets live in ConnectWise and everyone logs time to the quarter hour.

About the role:

Jacksonville IT is hiring for the Senior SOC Analyst role to monitor, investigate and respond to security alerts across our environment. Remote within the US. The team meets in Jacksonville once a quarter, travel covered. Clear written English is a must, as the team works across time zones.

Your responsibilities:

• Hand off open cases at shift change with clear notes.
• Check threat intelligence feeds and IOCs against our environment.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Help with user access reviews and offboarding audits.
• Tune noisy detection rules with the security engineering team.
• Analyze reported phishing emails, check headers and URLs, and purge malicious messages.
• Write and update SOC runbooks and playbooks.

What you need:

• Must be able to pass a background check.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Working knowledge of SIEM and EDR tools.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• CompTIA Security+ or equivalent (or ability to obtain within six months)

Nice to have:

• Prior help desk or network administration experience.
• KQL or SPL query writing.

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Starting pay: $138,000-$167,000/year, depending on experience and certifications.

What we offer:

• Health insurance.
• 401(k) with a 100% match up to 5%.
• Three weeks of PTO to start.
• Employee assistance program.
• Life insurance.
• Referral program.

Jacksonville IT is an Equal Opportunity Employer, including disability and protected veteran status.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Jacksonville IT.