SOC Tier 2 Analyst

Job not on LinkedIn

🕒 June 7

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Defianx

WebsiteLinkedInAll Job Openings

2 - 10 employees

Founded 2016

🔒 Cybersecurity

🏛️ Government

💼 Consulting

Cybersecurity • Government • Consulting

Defianx is a cybersecurity services and consulting firm that helps organizations protect mission-critical operations, people, and infrastructure. It provides security operations (SOC), incident response, threat hunting, cyber fusion, security engineering, cloud modernization, identity and endpoint protection, and federal program support for agencies and prime contractors. Defianx focuses on operational resilience, compliance, and executive visibility to enable leaders to make better decisions and keep essential services running.

📋 Description

• Serve as the primary investigative and response resource within the Security Operations Center • Conduct deeper investigations of escalated incidents • Validate potential threats • Perform threat hunting activities • Coordinate technical response efforts • Analyze complex attack patterns across multiple systems and data sources • Correlate information from endpoints, networks, cloud platforms, identity services, and threat intelligence feeds • Determine the scope, severity, and business impact of potential incidents • Perform advanced log analysis, malware triage, forensic review, and threat intelligence correlation • Serve as the technical lead during moderate severity incidents • Provide guidance to Tier 1 analysts during investigations • Contribute to detection engineering efforts by improving security monitoring content, developing detection logic, refining alert rules, and recommending improvements to SOC operations

🎯 Requirements

• Advanced knowledge of cybersecurity operations • Threat detection methodologies • Incident response procedures • Attack frameworks • Threat actor tactics, techniques, and procedures • Strong experience with SIEM platforms • EDR platforms • Network security monitoring • Cloud security technologies • Threat intelligence platforms • Incident management processes • Experience investigating ransomware, phishing campaigns, credential theft, insider threats, and cloud security incidents • Ability to analyze large volumes of data • Identify subtle indicators of compromise • Make informed decisions under pressure • Understand MITRE ATT&CK • Threat hunting methodologies • Detection engineering principles • Digital evidence collection • Typical certifications include CySA+, GCIA, GCIH, GCED, CASP+, CISSP, or equivalent • Minimum of Secret Clearance

🏖️ Benefits

• Medical benefits • Paid time off • Paid holidays • Professional development opportunities • Certification support • Flexible work arrangements based on customer and operational requirements