SOC Analyst 2

Job Description

Job Title: SOC Analyst 2

Location: Harrisburg, PA

Duration: 4 Months

Work Schedule: Full-Time, Onsite (Shift-based, 24/7 Operations)Job Summary

We are seeking a skilled SOC Analyst 2 to support enterprise cybersecurity operations by monitoring, detecting, investigating, and responding to security events. The ideal candidate will have experience in Security Operations Center (SOC) environments, incident response, threat hunting, and SIEM technologies, with the ability to analyze security data and contribute to continuous improvement of security monitoring and detection capabilities.Key Responsibilities

Monitor enterprise security systems and network activity to detect and respond to potential security threats.

Perform continuous security monitoring of mission-critical systems and infrastructure.

Receive, triage, document, and respond to security events originating from multiple monitoring platforms.

Investigate escalated security alerts to determine scope, root cause, and business impact.

Analyze logs, network traffic, endpoint telemetry, and other security data to identify indicators of compromise (IOCs).

Conduct proactive threat hunting activities to identify suspicious behavior and emerging threats.

Tune and optimize SIEM detection rules, correlation logic, and alerts to improve detection accuracy and reduce false positives.

Develop, maintain, and enhance SOC playbooks, standard operating procedures (SOPs), and incident response documentation.

Participate in incident response activities, containment efforts, and post-incident reviews.

Monitor threat intelligence sources for emerging vulnerabilities and attack trends.

Assist with root cause analysis and recommend security improvements.

Generate security reports, dashboards, and operational documentation.

Collaborate with cross-functional IT and security teams during incident investigations and remediation activities.Required Qualifications

Experience working in a Security Operations Center (SOC) or cybersecurity operations environment.

Strong knowledge of incident response, security monitoring, and threat detection.

Experience analyzing security logs, endpoint telemetry, and network traffic.

Knowledge of SIEM platforms and security event correlation.

Experience with threat hunting methodologies and identifying Indicators of Compromise (IOCs).

Familiarity with cybersecurity frameworks, attack techniques, and security best practices.

Experience creating security queries, reports, and scripts using SIEM query languages or scripting tools.

Strong troubleshooting, analytical, and problem-solving skills.

Excellent written and verbal communication skills.

Ability to work independently and collaboratively in a fast-paced environment.

Proficiency with Microsoft Office and standard business software.Preferred Skills

SIEM Administration & Monitoring

Security Event Analysis

Threat Hunting

Incident Response

Endpoint Detection & Response (EDR)

Network Security Monitoring

Log Analysis

Threat Intelligence

Detection Engineering

Root Cause Analysis

Playbook Development

Security Automation

Scripting (PowerShell, Python, or similar)

Cybersecurity Operations

Risk Assessment

Full-time