[Hiring] SOC Analyst II @eRecruiter

Role Description

Our client in IT/Tech sector is seeking a SOC Analyst II to join the security operations team. This is a hands-on, second-line role at the center of the client's detection and response program.

The ideal candidate will spend each day:

• Investigating security alerts that have escalated beyond the initial triage layer.
• Distinguishing genuine threats from false positives.
• Driving confirmed incidents through containment, remediation, and resolution.
• Operating in a fast-paced, telemetry-rich environment spanning cloud and on-premises infrastructure, thousands of endpoints, and a modern security stack that includes SIEM, EDR, and email security platforms.

Beyond day-to-day monitoring, the ideal candidate will:

• Take ownership of improving the effectiveness of the security operations function.
• Contribute to maturing detection content.
• Reduce alert fatigue by tuning false positives.
• Enhance incident response runbooks and playbooks to ensure consistent handling across shifts.
• Work closely with senior SOC analysts, threat hunters, and detection engineers to strengthen technical expertise and progress toward a Tier 3 SOC Analyst or specialized Security Engineering career path.

This is a fully remote opportunity available on either a full-time or contract basis.

Qualifications

• 2 to 4 years of hands-on SOC, incident response, or security analyst experience.
• Working knowledge of SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar.
• Familiarity with EDR tooling including CrowdStrike, SentinelOne, or Microsoft Defender.
• Solid grounding in networking fundamentals, TCP/IP, DNS, and common attack techniques.
• Ability to interpret logs and telemetry to reconstruct an attack timeline.
• Strong written documentation and clear communication under time pressure.

Requirements

• Security+, CySA+, GCIH, or equivalent certification.
• Experience with SOAR platforms and automation scripting in Python or PowerShell.
• Working familiarity with the MITRE ATT&CK framework and threat-informed defense.
• Exposure to cloud security monitoring in AWS or Azure.