Security Analyst

We are hiring a Nashville-based SOC Analyst to join an in-house security team that has moved past the old reactive, ticket-counting model and built a predictive operation around threat intelligence, threat hunting, and detection engineering. You will be the front line reviewing and triaging detections, deciding what to contain, elevate, or run down, and documenting your actions cleanly. This is a growth seat. The goal is to bring you in, coach you, and develop you toward threat hunting, detection engineering, or threat intelligence as you prove yourself. Success is measured on signal quality and SOC health, not how many tickets you close. Compensation $30-35/hr W2, long-term contract with benefits. Rates are revisited yearly as your capabilities and scope grow. Logistics Nashville, 4 days/week in office, 1 day remote once ramped up. 1 week/month on-call rotation Here's what you'll be doing Monitor and triage alerts and detections, working primarily inside Google Security Operations Investigate, contain, eradicate, or elevate detections with appropriate urgency Run searches and research across Google SecOps and Microsoft Defender for Endpoint Work against MITRE ATT&CK-driven detection coverage, where volume is high and low-value alerts are automated out Document detections and response actions and produce reports for team review Contribute to threat hunting, threat intelligence, and detection engineering efforts as you grow into them Participate in the on-call rotation once ramped Prioritize based on real risk and coverage rather than raw alert count And what you need to have Hands-on security operations or security engineering experience, ideally around two years in a SOC, detection, or security engineering capacity. Candidates who pair that foundation with genuine hunger to learn and grow are the target Solid grasp of networking and data concepts, authentication, and how systems get secured Comfort reviewing logs and building structured queries and regex searches Familiarity with security operations and SIEM concepts. Exposure to Google SecOps is a plus, and Microsoft Defender for Endpoint or Microsoft XDR familiarity is a plus Awareness of sandboxing concepts A home lab or self-driven security tinkering (Wazuh, Suricata, Pi-hole, anything you built and run yourself) is a strong signal we look for CompTIA Security+ or similar certifications are a plus, and relevant coursework counts Curiosity and humility. You ask questions, you say "I don't know, here's how I'd work through it," and you are hungry to keep improving #J-18808-Ljbffr