SOC Analyst III

Our field services team covers retail chains, hospitals and banks, dispatching technicians to over 4,000 sites.

We are adding an SOC Analyst III to our Information Security team. The Information Security team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. This role is fully remote within the US. Please make sure you have a quiet place to work and a solid internet connection.

In this role you will

• Check threat intelligence feeds and IOCs against our environment
• Analyze reported phishing emails, check headers and URLs, and purge malicious messages
• Help with user access reviews and offboarding audits
• Document incidents with timeline, impact and root cause
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests
• Review firewall, proxy, VPN and authentication logs for suspicious activity
• Write and update SOC runbooks and playbooks

What you'll need

• 5+ years in an SOC, security analyst or IT security role
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Working knowledge of SIEM and EDR tools

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Pay and benefits

• Health, dental and vision coverage starting on day one
• 401(k) with a 100% match up to 5%
• 12 weeks of paid parental leave
• Vision insurance
• Tuition reimbursement
• Flexible schedule
• $1,000 home office setup budget

San Diego Business Technology provides equal employment opportunities to all employees and applicants.

Applicants must be authorized to work in the U.S.

We are unable to sponsor visas for this position.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at San Diego Business Technology LLC.