> Markdown version of [/jobs/ext/1428980-security-operations-analyst-ii-threat-detection-incident-response](https://www.wearedevelopers.com/jobs/ext/1428980-security-operations-analyst-ii-threat-detection-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Operations Analyst II - Threat Detection & Incident Response - **Company:** DevCare Solutions - **Location:** Harrisburg, PA, United States - **Salary:** $85,280.0 - $95,680.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Computer Networks, Query Languages, Intrusion Detection and Prevention, Security Information and Event Management, Information Technology, Cybercrime - **Published:** July 24, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ee4a457df2ce3ed5 ## About the Role The ideal candidate will have experience with SOC operations, SIEM analysis, security investigations, threat hunting, and developing detection improvements to strengthen cybersecurity operations., * Experience in a Security Operations Center (SOC), cybersecurity operations, or related security role. * Ability to analyze and interpret complex technical security information. * Experience creating queries, reports, and scripts using SIEM query languages. * Strong troubleshooting and investigation skills. * Ability to prioritize multiple tasks in a fast-paced security environment. * Excellent written and verbal communication skills. * Ability to work independently and as part of a team., * Experience with threat hunting, security investigations, and incident response. * Experience with SIEM tools, alert tuning, and detection engineering. * Knowledge of cybersecurity monitoring and response processes. ## Description * Perform continuous security monitoring and proactive response for critical IT systems and communication environments. * Investigate escalated security alerts to determine scope, root cause, severity, and potential impact. * Analyze security logs, network traffic, endpoint telemetry, and other data sources to identify threats and indicators of compromise (IOCs). * Conduct threat hunting activities to identify suspicious activity and potential adversary behavior. * Create and optimize SIEM queries, reports, scripts, dashboards, and detection rules. * Tune security alerts and correlation logic to improve detection accuracy and reduce false positives. * Follow, maintain, and improve SOC playbooks, procedures, and standard operating processes. * Document security incidents, investigations, response actions, and findings. * Support incident response activities and assist with security event resolution. * Monitor threat intelligence sources for emerging risks and actionable security events. * Participate in root cause analysis and lessons learned activities. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [React and the power of visualisation](https://www.wearedevelopers.com/videos/100-react-and-the-power-of-visualisation) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [All your telemetry data from any source in one place](https://www.wearedevelopers.com/videos/57-all-your-telemetry-data-from-any-source-in-one-place) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)