Security Operations Center Analyst

SOC Analyst Seeking a skilled and motivated SOC Analyst to support a major financial services client in a hybrid capacity based in Phoenix, AZ. This role is responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats while ensuring the protection of sensitive financial data and systems. The ideal candidate will bring at least 3 years of hands‑on experience in security operations and a strong understanding of enterprise cybersecurity practices. 6-Month W2 Contract (open to extension/conversion) Location : Phoenix, AZ (Hybrid – 3 days onsite per week) Experience Level : Mid-Level (Minimum 3 years) Key Responsibilities Monitor security alerts and events using SIEM tools (e.g., Splunk, QRadar, Sentinel) to identify potential threats. Investigate and respond to security incidents, including triaging alerts and performing root cause analysis. Analyze network traffic, endpoint behavior, and log data to detect malicious activity. Escalate confirmed incidents and collaborate with incident response teams for containment and remediation. Maintain and fine‑tune detection rules, correlation logic, and alert thresholds. Document security incidents, response actions, and findings in accordance with organizational standards. Perform threat hunting activities to proactively identify vulnerabilities and potential attack vectors. Support vulnerability management by reviewing scan results and recommending mitigation strategies. Participate in security audits, compliance activities, and reporting requirements (e.g., SOC 2, PCI‑DSS). Work closely with cross‑functional IT and business teams to strengthen security posture. Stay current on emerging threats, vulnerabilities, and security technologies. Required Qualifications Minimum of 3 years of experience in a SOC, cybersecurity, or information security role. Hands‑on experience with SIEM platforms (e.g., Splunk, IBM QRadar, Microsoft Sentinel). Strong understanding of network protocols, operating systems (Windows/Linux), and security controls. Experience with incident response processes, threat analysis, and forensic investigation. Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls. Knowledge of common attack vectors (phishing, malware, ransomware, lateral movement, etc.). Strong analytical, troubleshooting, and communication skills. Ability to work in a fast‑paced environment and manage multiple alerts/incidents simultaneously. Preferred Qualifications Industry certifications such as Security+, CISSP, GCIH, or CE. Experience in the financial services or banking sector. Familiarity with SOAR tools and automation workflow. Exposure to cloud security (Azure, AWS) and endpoint detection tools (EDR/XDR). #J-18808-Ljbffr