Senior SOC Analyst

About us

Treasure Coast Cyber runs a 24/7 security operations center that monitors endpoints, firewalls and cloud accounts for mid-sized companies. Incident response is a big part of the work: ransomware recovery, business email compromise and forensic investigations. We write internal post-mortems after every major engagement, including what went wrong.

About the role

Our team is growing and we are hiring a Senior SOC Analyst. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. This role is fully remote within the US. You get a company laptop and a headset before you start.

Day to day

• Tune noisy detection rules with the security engineering team
• Document incidents with timeline, impact and root cause
• Check threat intelligence feeds and IOCs against our environment
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Help with user access reviews and offboarding audits
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners

About you

• 5+ years in an SOC, security analyst or IT security role
• Experience reading Windows Event Logs, Sysmon and Linux logs
• Familiarity with the MITRE ATT&CK framework

Why work with us

Expected salary range: $133,000 - $158,000 per year, plus bonus eligibility.

• Medical, dental and vision insurance
• 401(k) with company match
• 11 paid holidays

We are unable to sponsor visas for this position.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Treasure Coast Cyber.