Cybersecurity SOC Analyst Job at Beacon Hill (King of Prussia)

Principal Cybersecurity Incident Response Analyst

Principal Cybersecurity Incident Response Analyst role at HPE's Cyber Defense Ce...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree (or equivalent work experience) required, preferably in computer science, engineering or related area of study
Typically 8+ years of relevant experience
SOC team/Incident response/Advanced threat analyst experience is required
Proven track record of leading complex cybersecurity initiatives and managing ambiguous incidents
Extensive understanding of adversary tactics, techniques, and procedures (TTPs)
Extensive Cyber and IT security knowledge
Extensive understanding of Cyber and IT security risks, best practices, threats and prevention measures
Extensive understanding of SQL and relevant scripting languages
Extensive data security system analysis skills
Extensive risk assessment and management skills

Job Responsibility

Lead and coordinate responses to the most severe and complex cybersecurity incidents
Guide cross-functional teams through containment, eradication, and recovery
Provide executive-level oversight and decision-making during critical incidents
Effectively analyze associated logs and respond to high severity incidents
Contribute to the company's security response methods
Mentor and provide technical guidance to less experienced cybersecurity professionals
Stay at the forefront of cybersecurity trends, threats, and technologies
Foster a culture of continuous improvement and innovation
Provide insight and guidance through after action reviews

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive benefits suite supporting physical, financial and emotional wellbeing

Fulltime

SOC Insider Threat Lead Analyst

SOC Insider Threat Lead Analyst position at Citi, responsible for monitoring, re...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

6+ years working in the security & operations fields
Bachelor's degree or higher (Computer Science or Cybersecurity preferred) or equivalent work experience
Excellent knowledge of network security, TCP/IP, various operating systems (Windows/UNIX), and web technologies
Ability to read and understand packet level data
Experience with user behavior analytics, DLP, IDS/IPS, firewalls, and host security products (HIPS, AV, EDR, etc)
Certifications from EC-Council, GIAC, or (ISC)² are preferred [CISSP, C|EH, GCIA, CCNA]
Good communication skills with the ability to articulate clearly in high stress situations
Skills and proficiency with MS PowerPoint, Excel, Access or other analytical tools

Job Responsibility

Perform monitoring, research, assessment and analysis on alerts from various security tools
Recommend and review new use cases for insider threat monitoring
Follow pre-defined actions to investigate security incidents or perform incident response actions
Execute daily ad hoc tasks or lead projects as needed
Participate in or lead daily and ad-hoc conference calls
Create, update or provide process documentation, or provide requested evidence for compliance & controls requests

Fulltime

Incident Response and SOC Analyst

The role supports the Cyber Security Operations Centre for the EU critical infra...

Location

Belgium , Brussels

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Strong incident response methodology and hands-on experience in end-to-end incident handling in multinational settings
Advanced knowledge of XSOAR playbook creation and automation
Proficiency in designing and adapting automated workflows and enrichment
Python programming skills
Ability to present technical and business information effectively to diverse EC stakeholders
High standards for incident documentation, KPI reporting, and compliance with security frameworks
Familiarity with cloud-native services (AWS, Azure), EDR, SIEM-SOAR platforms, and container security
Excellent communication skills for working in multicultural teams and liaising with technical and non-technical audiences
Certifications or experience in relevant security technologies (e.g., Palo Alto Cortex XSOAR, Splunk, Microsoft SC-200, AWS Security Specialty)
Level 6 European Qualification Framework (Bachelor's degree or higher) for senior profiles

Job Responsibility

Define incident handling procedures, automation requirements, and playbook logic aligned with the needs
Prepare incident response workflows, automated enrichment steps, and technical documentation for standardized alert handling
Handle cybersecurity incidents from detection through escalation, containment, and resolution
Develop and maintain XSOAR playbooks, integrations, and automations across platforms such as Splunk, AWS, Azure Sentinel, Carbon Black Cloud, and Sysdig
Coordinate and review playbook updates, incident reports, and cross-team collaboration
Report key performance metrics, including FPTP rate, MTTH, escalation rate, automation coverage, time saved, and error reductions
Assist training analysts on playbook usage and incident response methods
Collaborate with CSIRC, CATCH analysts, infrastructure teams, and external stakeholders to validate playbook coverage and share threat intelligence.

What we offer

Mobility options (including a company car)
Insurance coverage
Meal vouchers
Eco-cheques
Continuous learning opportunities through the Sopra Steria Academy
Participation in team events.

Fulltime

Senior Cybersecurity Analyst, Threat Hunter

Our cybersecurity and information security teams at IDEXX contribute to a more r...

Location

United States , Westbrook, Maine

Salary:

120000.00 - 140000.00 USD / Year

IDEXX

Expiration Date

Until further notice

Requirements

6–10 years of experience in cybersecurity roles
Minimum of 3 years dedicated specifically to threat hunting or advanced incident response
Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field
Preferred certifications GCIH (GIAC Certified Incident Handler) and CompTIA CySA+ (Cybersecurity Analyst+) certification
Proven, hands-on experience using platform for EDR (Endpoint Detection and Response) and threat hunting
Expert-level knowledge of PowerShell Scripting, Python and EDR and SIEM query language is preferred
Deep understanding of incident response lifecycles, methodologies, and forensic techniques
Strong knowledge of networking protocols, operating systems (Windows, Linux, macOS), and common attack vectors
Familiarity with scripting languages (e.g., Python, PowerShell) for automation of hunting tasks is a plus
Exceptional analytical and problem-solving skills with keen attention to detail

Job Responsibility

Proactively hunt for indicators of compromise (IOCs) and advanced persistent threats (APTs) across the network, endpoints, and cloud environments using threat intelligence and a hypothesis-driven methodology
Conduct in-depth analysis of security events, network traffic, and endpoint data to identify malicious activity and potential breaches
Utilize the SIEM and EDR platform extensively, applying expert knowledge of the scripting, SIEM and EDR query language to perform complex searches and data analysis
Lead and participate in incident response activities, including containment, eradication, and recovery efforts, serving as a primary escalation point for critical security incidents
Develop and refine threat hunting playbooks, procedures, and detection rules to improve the security team’s efficiency and effectiveness
Collaborate with the security engineering and security operations center (SOC) teams to integrate new threat intelligence and enhance existing security tools and controls
Mentor junior analysts and contribute to the ongoing improvement of the organization's overall security posture

What we offer

Opportunity for annual cash bonus
Health / Dental / Vision Benefits Day-One
5% matching 401k
Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching

Fulltime

Senior Cybersecurity Incident Response Analyst

You will work as a Senior Cybersecurity Incident Response Analyst as part of Hew...

Location

Ireland , Galway

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree (or equivalent work experience) required, preferably in computer science, engineering or related area of study
typically 4+ years of relevant experience
SOC team/Incident response analyst experience is required
proven track record of leading complex cybersecurity initiatives and managing ambiguous incidents
advanced understanding of adversary tactics, techniques, and procedures (TTPs)
advanced Cyber and IT security knowledge
advanced understanding of Cyber and IT security risks, best practices, threats and prevention measures as well as containment and remediation actions
advanced understanding of SQL and relevant scripting languages
advanced data security system analysis skills
advanced risk assessment and management skills

Job Responsibility

Lead and coordinate responses to the most complex cybersecurity incidents, guiding cross-functional teams through containment, eradication, and recovery
analyze associated logs and respond to high severity incidents
suggest automation opportunities to enhance IR
mentor and provide technical guidance to less experienced cybersecurity professionals
stay at the forefront of cybersecurity trends, threats, and technologies
foster a culture of continuous improvement and innovation
encourage the adoption of new technologies and methodologies
provide insight and guidance through after action reviews working with stakeholders.

What we offer

Comprehensive suite of benefits supporting physical, financial and emotional wellbeing
programs for professional and personal career development
unconditional inclusion and flexibility to manage work and personal needs.

Fulltime

Cybersecurity GRC Tool Analyst

Cybersecurity GRC Tool Analyst to analyse the technology requirements of the var...

Location

Canada

Salary:

97600.00 - 181000.00 CAD / Year

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree in Information Security, Information Technology, Risk Management or a related field, or equivalent experience
CISSP, ISO 27001 Lead Implementer, or similar certification
GRC platform certifications (e.g., Archer Certified Professional, ServiceNow GRC, Drata Admin, OneTrust Certified)
ITIL Foundation (a plus)
5-7 years of experience in Information Security, IT Governance, or Risk Management
5+ years of experience working with GRC platforms (e.g., Archer, ServiceNow GRC, AuditBoard, Drata, OneTrust, or similar)
Expert at working with Governance Risk & Compliance platforms
Strong understanding of cybersecurity and compliance frameworks (e.g., NIST CSF, ISO 27001)
Experience with basic integrations and workflow configurations
Strong organizational skills and attention to detail

Job Responsibility

Administer and maintain the GRC platform, including configurations, workflows, and reporting dashboards
Support the integration of the GRC tool with key enterprise systems (e.g., asset inventory, ticketing systems, vulnerability management tools)
Collaborate with cybersecurity, policy, risk, compliance, and IT teams to capture business requirements and translate them into functional tool capabilities
Assist in onboarding and managing control frameworks (e.g., ISO 27001, SOC 2, NIST CSF, FedRAMP) within the platform
Monitor data quality, ensure accurate reporting, and maintain platform integrity
Support control owners and stakeholders in using the GRC platform for assessments, evidence collection, and tracking remediation activities
Maintain user roles and permissions, ensuring proper access management
Document processes, workflows, and platform configurations
Provide training and guidance to end users on tool functionality and best practices
Coordinate with tool vendors for issue resolution, upgrades, and enhancements

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive benefits suite supporting physical, financial and emotional wellbeing

Fulltime

Security Operations Analyst

Location

Spain , Valencia

Salary:

Not provided

United ITs

Expiration Date

Until further notice

Requirements

Knowledge of Transmission Control Protocol / Internet Protocol (TCP/IP) protocols
Deep knowledge of Microsoft Security Tools (e.g. M365, Cloud App Security, Azure, Defender for Endpoints, Azure Security, Azure Sentinel and XDR)
Deep Knowledge of Cloud technologies (e.g. Azure, AWS and GCP)
Deep knowledge of SIEM tools like Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack
Knowledge of at least one EDR solution (MS Defender for Endpoint, SentinelOne, CrowdStrike)
Knowledge of email security, network monitoring, and incident response
Knowledge of Linux/Mac/Windows
A minimum of five (5) years of relevant experience in information technology field, including triage of alerts and supporting security incidents
Proven experience with the usual toolbox available in a SOC (e.g., SIEMs, EDRs), able to autonomously perform technical analysis of security threats and collaborate with Incident Response team
Trouble ticket generation and processing experience

What we offer

Teleworking option: Yes, up to 4 days per week (for consultants working from Valencia)

Fulltime

Security Operations Analyst I

Our Security Operations Analyst I position supports our Virtual Network and Secu...

Location

United States , North Wilkesboro

Salary:

Not provided

InfusionPoints

Expiration Date

Until further notice

Requirements

AS/BS degree in Information Technology, Computer Science, Engineering or related field
1-3 years of hands-on deep technical experience
Security analysis, threat hunting, forensics, flow analysis, and log management experience
IDS/IPS management, PCAP carving, file extraction, and long tail analysis experience
Strong understanding of attacker tactics, techniques, and procedures
Understanding of endpoint and network security
Experience with or knowledge of vulnerability management and penetration testing of systems, applications, and networks
General understanding of industry standards, compliance, and legal guidelines: ISO 27001, FedRAMP, NIST 800-171, NIST 800-53, SOC 2, and HIPAA
Self-starter able to drive towards goals and manage time effectively
Analytical and the ability to think on the fly

Job Responsibility

Perform event and incident triage, threat hunting, and incident response
Use industry-leading commercial and open source software to detect, evaluate, triage, prioritize, and respond to security events
Support research and development, security module creation, automation, and process improvement
Support vulnerability management and penetration tests
Write both technical and executive incident reports when called upon
Continuous learning and improvement of security analysis skills to match current technical security challenges and innovations

What we offer

competitive compensation and benefits package

Fulltime

Select Country

Cybersecurity SOC Analyst

Job Description

Job Responsibility

Requirements

Looking for more opportunities?