SOC Analyst 2 - 26-09257

Job Description

Job Description

Job Title: SOC Analyst 2

Location: Harrisburg, PA
Duration: 4 Months
Work Schedule: Full-Time, Onsite (Shift-based, 24/7 Operations)

We are seeking a skilled SOC Analyst 2 to support enterprise cybersecurity operations by monitoring, detecting, investigating, and responding to security events. The ideal candidate will have experience in Security Operations Center (SOC) environments, incident response, threat hunting, and SIEM technologies, with the ability to analyze security data and contribute to continuous improvement of security monitoring and detection capabilities.

• Monitor enterprise security systems and network activity to detect and respond to potential security threats.
• Perform continuous security monitoring of mission-critical systems and infrastructure.
• Receive, triage, document, and respond to security events originating from multiple monitoring platforms.
• Investigate escalated security alerts to determine scope, root cause, and business impact.
• Analyze logs, network traffic, endpoint telemetry, and other security data to identify indicators of compromise (IOCs).
• Conduct proactive threat hunting activities to identify suspicious behavior and emerging threats.
• Tune and optimize SIEM detection rules, correlation logic, and alerts to improve detection accuracy and reduce false positives.
• Develop, maintain, and enhance SOC playbooks, standard operating procedures (SOPs), and incident response documentation.
• Participate in incident response activities, containment efforts, and post-incident reviews.
• Monitor threat intelligence sources for emerging vulnerabilities and attack trends.
• Assist with root cause analysis and recommend security improvements.
• Generate security reports, dashboards, and operational documentation.
• Collaborate with cross-functional IT and security teams during incident investigations and remediation activities.

• Experience working in a Security Operations Center (SOC) or cybersecurity operations environment.
• Strong knowledge of incident response , security monitoring , and threat detection .
• Experience analyzing security logs, endpoint telemetry, and network traffic.
• Knowledge of SIEM platforms and security event correlation.
• Experience with threat hunting methodologies and identifying Indicators of Compromise (IOCs).
• Familiarity with cybersecurity frameworks, attack techniques, and security best practices.
• Experience creating security queries, reports, and scripts using SIEM query languages or scripting tools.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Proficiency with Microsoft Office and standard business software.

• SIEM Administration & Monitoring
• Security Event Analysis
• Threat Hunting
• Incident Response
• Endpoint Detection & Response (EDR)
• Network Security Monitoring
• Log Analysis
• Threat Intelligence
• Detection Engineering
• Root Cause Analysis
• Playbook Development
• Security Automation
• Scripting (PowerShell, Python, or similar)
• Cybersecurity Operations
• Risk Assessment