WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Back

SOC Analyst 2

Stellar Professionals
Harrisburg, PA, United States
20 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Shift work
Job source
www.dice.com

Tech stack

Intrusion Detection and Prevention Network Packet Python (Programming Language) Pcap Log Analysis Windows PowerShell Kusto Query Language Security Information and Event Management Scripting Cybercrime Splunk

Job description

  • Perform real-time security monitoring and proactive threat handling.
  • Investigate security events escalated within the Security Operations Center (SOC).
  • Conduct root cause analysis and participate in post-incident lessons learned.
  • Monitor external threat intelligence feeds for actionable insights.

Requirements

  • SIEM & Scripting: Strong experience building queries, reports, and scripts (Splunk SPL, KQL, Python, PowerShell).
  • Telemetry & Log Analysis: Deep expertise in analyzing network packet captures (PCAP), endpoint logs, and Indicators of Compromise (IOCs).
  • Alert Triage & Escalation: Proven track record in determining root cause, scope, and potential impact of escalated alerts.
  • Detection Engineering: Hands-on experience tuning detection rules and correlation logic to reduce false positives.
  • Threat Hunting & SOPs: Proactive threat hunting skills and experience following/updating incident response playbooks.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

Moments

Explore playlists

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders · LIVE

4:23 min

Boosting security operations center productivity with intelligent data analysis

Chris Wysopal Chris Wysopal +2 · WWC 2024

4:19 min

Introduction to network security and endpoint monitoring architectures

Christoph Ruggenthaler · LIVE

3:10 min

Correlating dispersed logs using structured request tracing

Michael Eder +1 · LIVE

14:14 min

Addressing audience inquiries on analytical implementation and career growth

Julian Joseph · LIVE

Videos

See all
Our journey with Spring Boot in a microservice architecture thumbnail
58:05
LIVE • almost 4 years ago

Our journey with Spring Boot in a microservice architecture

Michael Eder, Philipp Frauenthaler

JavaScript? No. Java Scripts! - Scripting with Java thumbnail
46:19
Europe 2026 Virtual • about 1 month ago

JavaScript? No. Java Scripts! - Scripting with Java

Jens Knipper

Cyber Sleuth: Finding Hidden Connections in Cyber Data thumbnail
1:00:19
LIVE • over 2 years ago

Cyber Sleuth: Finding Hidden Connections in Cyber Data

Jennifer Reif

Better Together: Leveraging Your Observability Tools as a SIEM thumbnail
39:06
Europe 2026 Virtual • about 1 month ago

Better Together: Leveraging Your Observability Tools as a SIEM

Mathias Palmersheim

Intermediate Bitcoin Script thumbnail
1:06:12
LIVE • about 6 years ago

Intermediate Bitcoin Script

Steve Shadders

Oops! Stories of supply chain shenanigans thumbnail
43:57
LIVE • almost 5 years ago

Oops! Stories of supply chain shenanigans

Zbyszek Tenerowicz

Related articles

See all