Sign up to access all features of our service.
  • Job search
  • Favorites
  • Create a CV
    New
  • Salaries
  • Subscriptions

SOC Analyst

$123.85k - $161k

Horizon3

Get to Know Us

Horizon3.ai is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZero™ platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs.

We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, “checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

What You'll Do

We are seeking a skilled SOC Analyst to join our growing Security Operations team. This is a mid-level role for an analyst who has developed strong foundational skills in Security Information and Event Management (SIEM) and is ready to take ownership of monitoring, triage, and detection work with minimal day-to-day direction.

Working within one of our SOC shifts and reporting to the SOC Manager, you'll monitor the health and effectiveness of our SIEM platform (Elastic SIEM or equivalent) and support threat detection, log analytics, and incident response in a high-scale, cloud-native environment. As you grow, you'll take on more complex detections and investigations, contribute process improvements, and help onboard newer analysts.

This role is instrumental in helping us scale and mature our security detection and response capabilities while maintaining a strong security posture across the organization.

This role will be responsible for…..

  • Monitor, detect, and respond to security events across enterprise environments using the SIEM

  • Support log ingestion, parsing, and normalization, and monitor ingestion health across critical sources (AWS, Okta, endpoints, firewalls, SaaS), partnering with system owners to close telemetry gaps

  • Build and maintain dashboards, visualizations, and KPIs that demonstrate SIEM effectiveness and security visibility

  • Triage, investigate, and validate alerts, escalating confirmed or ambiguous incidents to a Senior Analyst or the SOC Manager with clear context

  • Tune and test detection rules (behavioral, heuristic, signature-based) to reduce false positives and improve fidelity

  • Use frameworks such as MITRE ATT&CK to contextualize detections and identify coverage gaps

  • Analyze logs across cloud, endpoint, network, and application sources to surface anomalies and potential threats

  • Perform structured investigations and root cause analysis, providing attack-chain mapping and remediation guidance for escalated alerts

  • Follow and help refine response playbooks for common incident types (phishing, suspicious logins, endpoint malware, privilege escalation, cloud misconfiguration), documenting lessons learned to strengthen detection logic

  • Contribute to SOAR automation (e.g., Tines or similar) to reduce manual toil and improve mean time to detect (MTTD) and respond (MTTR)

  • Use LLM/AI-assisted tooling to speed up triage, log summarization, and investigation enrichment, and contribute to SOC AI agent and automation workflows, verifying model output before acting on it

  • Participate in proactive threat hunting and contribute to weekly and monthly reporting on threat trends, false-positive reduction, and detection efficacy

  • Communicate clearly with shift peers and stakeholders, and, as you progress toward P3, help train and onboard more junior analysts

  • Demonstrate a commitment to integrity, process improvement, and customer satisfaction

What You'll Bring
  • Must have hands-on SOC or security-analyst experience spanning SIEM monitoring, alert triage, detection tuning, and incident response

  • Must have working experience with an enterprise SIEM such as Elastic SIEM (preferred), Splunk, Microsoft Sentinel, QRadar, or similar

  • Must have a solid grasp of log analysis, security telemetry, and event correlation

  • Must have proficiency with detection-rule authoring and query languages (KQL, Lucene, SPL) and scripting in Python, Bash, or PowerShell

  • Must have familiarity with at least one major cloud (AWS, GCP, or Azure) and its security tooling

  • Must have working knowledge of MITRE ATT&CK, NIST, and CIS

  • Must have practical familiarity with using LLMs / AI assistants at work, including effective prompting, grounding responses in trusted data, and recognizing model limitations and when to verify output

  • Must have strong analytical and problem-solving skills, with the ability to prioritize and manage your own work with minimal direction

  • Must have clear written and verbal communication and the ability to document processes and findings

Minimum Education and Experience
  • Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent hands-on security operations experience

  • 3–6 years in a SOC or security analyst role

  • Demonstrated hands-on experience operating an enterprise SIEM (Elastic SIEM preferred) in a cloud environment

Required Tech Stack Experience

  • SIEM platforms: Elastic SIEM (preferred), Splunk, Microsoft Sentinel, or QRadar

  • Query and detection languages: KQL, Lucene, or SPL

  • Scripting: Python, Bash, or PowerShell

  • Cloud platforms: AWS, GCP, and/or Azure

  • Security frameworks: MITRE ATT&CK, NIST, CIS

  • SOAR / automation platforms (e.g., Tines or similar)

  • Enterprise LLM / AI platforms (e.g., Claude, Gemini, AWS Bedrock, or similar) and prompt/agent tooling

Work Authorization & Security Clearance Requirements

Only US persons can interview for this role due to security clearance requirements by our customer(s) and/or vendor(s). Employee must be eligible for and successfully secure a US Federal Security Clearance as a condition of employment.

What Sets You Apart?

  • Certifications such as Security+, CySA+, GCIA, GCIH, or Elastic Certified Analyst

  • Hands-on experience with endpoint detection and response (EDR) or XDR platforms

  • Judgment about which model fits which task, e.g., fast, lower-cost models for high-volume triage vs. stronger reasoning models for complex investigations, and how to prompt each for reliable results

  • Experience building agentic workflows that chain models, tools, and data sources (e.g., automated enrichment, triage, or investigation summarization) on an enterprise AI platform

  • Experience mentoring or onboarding junior analysts, or leading small process improvements end-to-end

  • Experience in a high-growth SaaS or cybersecurity company

Travel Required

We are a fully remote company, and this job may require up to 5% of travel to be successful.

Compensation and Values

At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is recognized and compensated equitably across roles, levels, and locations.

In accordance with various State's transparency regulations, we provide the following range information for this position:

  • Base salary range: $123,850 - $161,000 annually. The exact salary will be determined based on the selected candidate's location, qualifications, experience, and relevant skills.

  • Additional compensation: All full-time roles are eligible for an equity package in the form of stock options.

Perks of Horizon3.ai

  • Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive.

  • Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities.

  • Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking.

  • Hybrid & Remote Work: We embrace a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office presence.

  • Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave.

You Belong Here

Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, hair length or any other legally protected status by law.

Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth.

We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

Application Note

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Vacancy posted 1 day ago
Similar jobs that could be interesting for youBased on the SOC Analyst in United States vacancy
  •  ...Quality Assurance (QA) function. Role will be primarily focused on SOC KPIs/metrics/reporting than active incident work. Assisting in...  ...scheduled weekly/bi-monthly/monthly QA meetings with L2 and L3 analysts. Coordinate Roundtable topics/training and lunch & learn sessions... 
    Suggested
    Work at office
    Remote work
    All shifts

    RIT Solutions

    United States
    3 days ago
  •  ...information and cyber security related projects, matters and issues. Your Role Overview: The Security Operations Center (SOC) Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity events and alerts across the organization... 
    Suggested
    Work at office
    Work from home
    Flexible hours
    2 days per week

    SUMITOMO MITSUI TRUST BANK, LIMITED

    New York, NY
    24 days ago
  •  ...Job Description Job Description CyberLinx Solutions is seeking a SOC Analyst (Tier 1) / Security Monitoring Analyst to support our Security Operations Center (SOC). This role is responsible for continuous monitoring of security alerts generated by SIEM, provide continuous... 
    Suggested

    CyberLinx Solutions LLC

    Annapolis Junction, MD
    22 days ago
  • RESPONSIBILITIES: Kforce has a client in Huntsville, AL that is seeking a SOC Watchfloor Analyst - Cybersecurity Analyst for a long-term contract role. This company offers excellent growth potential within a mission-critical federal program. Overview: We are seeking... 
    Suggested
    Hourly pay
    Long term contract
    Contract work

    Kforce Technology Staffing

    Huntsville, AL
    3 days ago
  •  ...Working remotely, the full-time Senior SOC Analyst will manage security incidents by monitoring, investigating, and identifying root causes while recommending effective mitigation strategies using cutting-edge security tools. Key responsibilities Continuously monitor... 
    Suggested
    Full time
    Remote work

    Virtual Vocations Inc

    United States
    4 days ago
  •  ...'ll be surrounded by people who believe in what they do-and in you. Join a team where you can make a difference! The Senior SOC Analyst is an experienced cybersecurity professional responsible for handling complex and high-priority security inquiries, incidents, and... 
    Flexible hours
    Shift work
    Weekend work

    N-able Technologies, Inc.

    Morrisville, NC
    2 days ago
  •  ...agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets. Senior SOC Analyst Location: Client site Boston, MA Position Overview The Senior SOC Analyst is responsible for advanced threat detection,... 
    Full time
    Work at office

    Nightwing

    Marlborough, MA
    2 days ago
  • Kforce has a client in Huntsville, AL that is seeking a SOC Watchfloor Analyst - Cybersecurity Analyst for a long-term contract role. This company offers excellent growth potential within a mission-critical federal program. Overview: We are seeking a Mid-Level Cybersecurity... 
    Long term contract
    Temporary work
    Huntsville, AL
    3 days ago
  • RESPONSIBILITIES: Kforce has a client in need of a SOC Analyst in Long Island City, NY. Responsibilities * Monitor, review, and triage email security alerts within a security operations environment * Perform Tier 1 and Tier 2 analysis of potential security incidents... 
    Hourly pay
    Contract work

    Kforce Technology Staffing

    Queens, NY
    3 days ago
  •  ...Seeking a skilled Tier 2 SOC Analyst with experience in AI tools, the full-time remote position will manage client detection strategies, organize alerts, and lead analysis for security remediation efforts. Key responsibilities Create and document internal alert strategies... 
    Full time
    Remote work

    Virtual Vocations Inc

    United States
    1 day ago
  •  ...Monitoring and analyzing cybersecurity threats, the full-time SOC Analyst I will respond to security events and alerts while collaborating with team members to protect client digital assets in a remote work environment. Key Responsibilities Monitor security events and... 
    Full time
    Remote work
    Shift work
    Night shift

    Virtual Vocations Inc

    United States
    20 hours ago
  •  ...Sr. SOC Analyst (Level 2) We are seeking a highly motivated and experienced Sr. SOC Analyst (Level 2) to join our growing Cyber Defense team in the US. In this critical role, you will be responsible for handling escalated incidents from Level 1 Analyst and conducting... 

    RIT Solutions

    Alpharetta, GA
    3 days ago
  •  ...SOC Analyst Location: Remote Duration: 6+ months with a possibility of extension Experience: 2 to 5 years' experience working a SOC Shift: Su, M, T, W, Th - 3rd shift - 12 am - 6 am Job Description: Summary of Project Provide analyst coverage to review alerts/incidents... 
    Remote work
    Shift work
    Night shift

    Artech

    United States
    1 day ago
  •  ...SOC Analyst L1 Hawaii Thanks for the click. We know your time is valuable so we will get right to it. We've amassed some of the best and brightest minds in cyber security who are passionate about protecting the digital world. Our team blends advanced technology... 
    Immediate start
    Remote work
    Flexible hours

    SilverSky

    United States
    4 days ago
  •  ...L3 SOC Analyst Saviynt's AI-powered identity platform manages and governs human and non-human access to all of an organization's applications, data, and business processes. Customers trust Saviynt to safeguard their digital assets, drive operational efficiency, and... 
    Permanent employment
    Full time
    Immediate start
    Remote work

    Saviynt

    United States
    3 days ago
  •  ...REQUIREMENTS: ~7+ years of SOC experience . ~ Tools - CrowdStrike, Tanium Sumo, O365 SHIFT: Sunday 11 PM - Monday 8 AM Monday 11 PM - Tuesday 8 AM ( Tuesday 11 PM - Wednesday 8 AM Wednesday 11 PM - Thursday 8 AM... 
    Contract work
    Shift work

    3B Staffing LLC

    Farmington, MI
    3 days ago
  • $78k - $105k

     ...Description Tier 1 SOC Analyst Xcelerate Solutions is seeking a Tier 1 SOC Analyst to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R). This position supports... 

    VMD Corp

    Alexandria, VA
    1 day ago
  •  ...detecting, analyzing, and responding to advanced threats using Microsoft Security tools, CrowdStrike, Splunk, Google Chronicle, and other SOC technologies. Detection Engineering Practitioner skilled in developing, tuning, and maintaining detection rules using KQL and SPL.... 

    Insight Global

    Hartford, CT
    3 days ago
  •  ...SOC Analyst II At Bank Bank, we take our information security seriously. We are looking for an experienced, passionate Security Operations Center (SOC) Analyst to join our security team. The ideal candidate must have excellent technical and problem-solving skills and... 

    InterSources

    Fremont, CA
    20 hours ago
  •  ...SOC Analyst **Must be a U.S. Citizen** Phoenix Cyber is looking for SOC Analysts to join our client delivery team. This is onsite at the client location in Chandler, AZ. This is a shift work position with some overnight work. Responsibilities: Monitor and... 
    Shift work
    Night shift

    Phoenix Cyber

    Phoenix, AZ
    1 day ago
  •  ...into cybersecurity, where high performers often grow into advanced analyst or security engineering roles within 12–18 months. You’ll...  ...Operations Center environment • Rapid career progression into Tier 2 SOC, Threat Hunting, or Incident Response roles • Comprehensive... 
    Full time
    Contract work
    Work at office
    Afternoon shift

    ASM Research, An Accenture Federal Services Company

    San Antonio, TX
    4 days ago
  •  ...SOC Analyst 2 Harrisburg, PA - 100% onsite In-person interviews are required. Flexibility to work in various shift rotations to support 24/7/365 operations, including days, nights, holidays, and weekends Position Purpose: The SOC Analyst 2 performs event triage... 
    Work at office
    Local area
    Shift work
    Night shift
    Weekend work

    I-Link Solutions

    Harrisburg, PA
    1 day ago
  •  ...Focused on leading incident response efforts and threat hunting, the full-time SOC Analyst will work remotely to protect Protera Technologies and its customers through proactive security monitoring and mentorship of junior analysts. Key responsibilities: Lead and coordinate... 
    Full time
    Remote work
    Shift work

    Virtual Vocations Inc

    United States
    3 days ago
  •  ...SOC Analyst Location: Baton Rouge, LA (Remote) Duration: 26 Months Ability to work in a hybrid model 3-days/week with consideration for other locations in the USA (Tempe, AZ or Tampa, FL preferred), including Tokyo. Job Description The Global Security Operations... 
    Remote work
    Shift work
    Afternoon shift
    3 days per week

    United Software Group

    Passaic, NJ
    20 hours ago
  •  ...Tier 1 Soc Analyst We're looking for a Tier 1 SOC Analyst to join our team and handle initial triage, monitoring, and investigation of security alerts across cloud and endpoint environments. This is a client-facing role requiring strong English, excellent verbal... 
    Remote work
    Day shift

    Commit Offshore

    United States
    1 day ago
  •  ...Position Description Valiant Solutions is seeking a SOC Analyst to join our rapidly growing and innovative cybersecurity team! The SOC Analyst is the senior Tier III analyst on the Security Operations Center floor, providing advanced triage, forensic analysis... 
    Full time
    Contract work
    Temporary work
    Work at office
    Shift work

    Valiant Solutions

    Washington DC
    1 day ago
  • $75k - $96.31k

     ...SOC Analyst Rush Street Interactive (NYSE: RSI) is a market leader in online casino and sports betting, currently operating real-money gaming with our brands: BetRivers.com, PlaySugarHouse.com, and RushBet.co. We're building bridges between online, social and land-based... 
    Work experience placement
    Remote work

    Rush Street Gaming

    United States
    2 days ago
  •  ...Security Operations Center (SOC) Analyst I The Security Operations Center (SOC) Analyst I provides real time security monitoring and threat hunting in our Security Operations Center. This individual will have the opportunity to work with customers across many industries... 
    Immediate start

    Heartland Business Systems Inc

    Springfield, MO
    2 days ago
  •  ...Job Description The Security Operations Center (SOC) Operator is responsible for monitoring the security and safety of the members, visitors, and staff on SSFCU's properties. Assists Analysts in routine and emergency calls from employees and/or company locations. Monitors... 
    Work experience placement
    Local area
    Flexible hours

    Security Service Federal Credit Union

    San Antonio, TX
    3 days ago
  • $35 - $45 per hour

     ...SOC Analyst Overview A leading healthcare organization is seeking a SOC Analyst to join its growing cybersecurity team. This role will support daily Security Operations Center (SOC) functions, including alert monitoring, event investigation, security triage... 
    Hourly pay
    Temporary work
    Remote work

    The LaSalle Group

    Plano, TX
    20 hours ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to SOC Analyst. Be the first to apply!