SOC Analyst II

About Campbell Cybersecurity

We do penetration testing, red team engagements and web application assessments for banks, hospitals and SaaS companies.

The role

This is a new role. The team has doubled in size over the past year. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. Remote position. Most of the team is in Port St. Lucie, but nobody is required to come in. You get a company laptop and a headset before you start.

What you'll work on

• Check threat intelligence feeds and IOCs against our environment
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Document incidents with timeline, impact and root cause
• Review firewall, proxy, VPN and authentication logs for suspicious activity

About you

• 3-5 years in an SOC, security analyst or IT security role
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols
• Basic scripting in PowerShell or Python
• Clear written communication for incident tickets and reports
• Must be able to pass a background check

Also helpful

• Malware analysis in a sandbox
• Cloud log analysis (CloudTrail, Entra ID sign-in logs)
• Prior help desk or network administration experience

Compensation and benefits

Salary range: $107,000 - $132,000/year

• Health, dental and vision coverage starting on day one
• 401(k) with 4% match
• Paid sick leave

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Campbell Cybersecurity.