[Remote] Security Operations Center Analyst
Note: The job is a remote job and is open to candidates in USA. Take2 Consulting, LLC is seeking experienced Cyber Security Specialists to join their fully remote Security Operations Center. The role involves monitoring and responding to cybersecurity threats, conducting digital forensics, and collaborating with teams to enhance security operations.
Responsibilities
- Monitor, analyze, investigate, and respond to cybersecurity threats and incidents
- Perform advanced EDR analysis, alert triage, IOC investigations, and threat detection
- Conduct digital forensics and support incident response efforts
- Investigate malware, phishing, lateral movement, privilege misuse, and data exfiltration events
- Perform proactive threat hunting activities using intelligence feeds and environmental knowledge
- Analyze logs and identify anomalies across cloud and on-premise environments
- Support SOC architecture improvements, detection engineering, and visibility enhancements
- Collaborate with engineers, system administrators, and cyber teams to contain and remediate threats
- Document findings, maintain investigative records, and provide detailed shift handoff reports
Skills
- Active Public Trust or Government Clearance Required
- Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
- 5–7 years of cybersecurity experience
- U.S. Citizen
- EDR platforms and endpoint telemetry analysis
- SIEM tools such as Splunk
- SOAR platforms and response automation
- Digital forensics and malware analysis
- Threat hunting and MITRE ATT&CK-based detection
- AWS cloud security and hybrid environments
- Windows and Linux operating systems
- Network protocols, TCP/IP, and common attack vectors
- Vulnerability management tools such as Tenable Nessus
- PowerShell, Python, Bash, or other automation/scripting languages
- ServiceNow or similar case management systems
- NIST CSF, NIST 800-53, CIS Benchmarks, STIGs, and related compliance frameworks
- One or more of the following certifications preferred: Security+, CySA+, CASP+, CISSP, SSCP, CEH, GCIH, GCIA, GCFA, GNFA, GDAT, or CSA
Company Overview