SOC Analyst (Sunnyvale)

Fortinet is looking for a Security Operations Centre (SOC) Analyst to be part of the FortiCloud SOC-as-a-Service team. This is a highly technical role, monitoring security events, identifying threats, assessing risks, and working with customers globally to improve their security posture.FortiCloud SOC-as-a-Service team operates based on a follow the sun approach. Working hours for this position includes 5 days/40 hours per week, consisting of 1 weekend and 4 weekdays (e.g. Sunday – Thursday or Tuesday – Saturday), 8am – 4pm.Responsibilities:Monitor SOC alerts to detect potential threatsUse threat intelligence feeds, triage alerts and filter out false-positives Create custom reports, dashboards, and execute log searches to support investigations and customer’s requirementsWork with customers and Forensic analysis team to contain and eradicate incidents if need beFollow Incident Response playbooks, processes and procedures and help to improve themCreate/Update use case detections to detect new threats from raw logsCreate/Update playbooks to automate repetitive triage stepsRequirements:Understanding of SOC operations and Incident Response Life cycle.Understanding of Cyber Kill chain, threat vectors and threat intelligenceUnderstanding of layered security at data, OS and network levelsUnderstanding Cybersecurity FrameworksHands-on experience with security log analysis such as AV, IPS, Anti-Spam logsHands-on experience with visualization, reporting technologiesHands-on experience with PostgreSQL, regular expressionsHands-on experience with Network Security technologies such as Firewalls, SIEM, SandboxHands-on experience with Linux and Windows system administration.Previous working experience with Fortinet products is a bonus.Team player, solution-focused, conflict management skillsSelf-directed, takes initiativesOpen to new challenges and learning opportunitiesUnderstands the importance of discipline, consistency and communicationGood verbal and written communication skillsCybersecurity certifications such as GCIA, GCIH, GMON, GSOC, CEH, Security+ is a bonusGraduates from IT degrees, or mid-career IT professionals with certifications in cybersecurity may applyMust be authorized to work in the U.S. without sponsorshipMust be authorized to work in the U.S. without sponsorship.Fortinet is an equal opportunity employer. We will only notify shortlisted candidates. Fortinet will not entertain any unsolicited resumes, please refrain from sending them to any Fortinet employees or Fortinet email aliases. Should any Agency submit any resumes to Fortinet, these resumes if considered, will be assumed to have been given by the Agency free of any related fees/charges.Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program. Wage ranges are based on various factors including the labor market, job type, and job level. On target earnings for this position is expected to be $117,000 - $143,000 per year. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.All roles are eligible to participate in the Fortinet equity program, and this position is also eligible for commissions based on the terms of the Sales Compensation PlanFull timePosting Date: 2026-07-03