SOC Analyst

This remote SOC role is a strong fit for experienced blue-team professionals who want hands-on detection and response work across on-premises and cloud environments. The analyst also advises infrastructure and application owners on vulnerability remediation, hardening, and security-platform improvements. What you would work on: - Monitor and investigate alerts from SIEM, EDR/XDR, IDS/IPS, firewall, cloud, identity, and endpoint platforms. - Perform incident triage, threat hunting, root-cause analysis, containment recommendations, and follow-up documentation. - Correlate logs, tune detections, reduce false positives, and identify telemetry gaps. - Analyze endpoint, authentication, VPN, firewall, cloud, and network activity for signs of compromise. - Prioritize vulnerability remediation and advise teams on secure configurations and system hardening. Good fit if: - You have 5+ years of security experience with substantial SOC, incident-response, and threat-detection work. - You understand Windows, macOS, Linux, Active Directory, cloud environments, networking, and common identity and network protocols. - You hold a relevant technical security certification; CySA+, CASP+, GCIH, GCIA, GSOC, or GMON are among the preferred credentials. Curated from Himalayas for IT Support Group readers. This is an external listing; use the apply link for the source listing and latest details.