Security Analyst II

Handle escalated security alerts and lead complex investigations for managed customers. Serve as a subject matter expert for the broader team. Act as an escalation point for Tier 1 Analysts and guide junior analysts. Review complex alert context, gather evidence, and reach final disposition. Follow established playbooks for the detection stack and proactively propose improvements. Communicate clearly in tickets for subsequent analysts and customers. Lead communications through the ticketing system on investigations and requests for information. Consistently meet performance scorecards for time-to-resolve and ticket closure quality. Actively hunt for noisy rules and submit tuning requests to the detection engineering team. Requirements 2–4 years of prior experience in a SOC, incident response, or dedicated cybersecurity role. Deep understanding of the cyber kill chain and MITRE ATT&CK framework, common attack vectors (phishing, credential abuse, malware delivery, lateral movement). Hands‑on experience with detection, prevention, and response tactics. Hands‑on experience navigating SIEM platforms. Strong written communication skills. Attention to detail: False positives and true positives often look nearly identical. CompTIA Sec+, CompTIA CySA+, BTL1, or equivalent certification is required within 90 days of hire if not already held. #J-18808-Ljbffr Jobtailor