SOC Analyst II

Resourcesoft, Inc.
Bellaire, TX, United States
5 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
4 years minimum
Working hours
Regular working hours

Tech stack

Application Layers Cloud Computing Cyber Security Dynamic Host Configuration Protocol Domain Name System (DNS) Intrusion Detection Systems Log Analysis Network Protocols Security Information and Event Management TCP/IP Software Vulnerability Management Mitre Att&ck
+3 more
Firewalls (Computer Science) ArcSight Event Correlation User Accounts

Job description

Analyze and validate security alerts generated within the Rapid7 SIEM to distinguish legitimate threats from false positives. Lead Level 2 triage and deep-dive investigation of suspicious activity across network, endpoint, and application layers. Correlate security telemetry from multiple sources to identify complex attack patterns and indicators of compromise. Orchestrate incident containment and remediation activities in collaboration with technical infrastructure and networking teams. Maintain accurate security incident tickets and produce detailed reports on technical findings and investigative actions. Evaluate recurring alerts and monitoring trends to improve detection logic and optimize SIEM performance.

Requirements

4+ years of professional experience operating within a Security Operations Center (SOC) at an L2 capacity. Proficiency in Rapid7 InsightIDR or equivalent enterprise SIEM platforms for advanced log analysis and event correlation. Experience with networking protocols and infrastructure including TCP/IP, DNS, DHCP, firewalls, and common ports. Experience in Level 2 security alert investigation across endpoints, user accounts, and diverse cloud infrastructure. Experience with incident response lifecycles, containment strategies, and threat-analysis frameworks like MITRE ATT&CK. Experience with EDR solutions, intrusion detection systems, and vulnerability management tools to identify malicious traffic. Excellent communication skills for documenting technical findings and coordinating escalations with stakeholders.

About the company

Founded in 1999, Resourcesoft, Inc. is a leading Technology Consulting and Professional Services organization. Headquartered in Marlborough, MA, the company serves the technology needs of its clients nationwide. Resourcesoft has often been recognized by prominent rating agencies for its exemplary growth and stability. With over two decades of industry experience, the Company has evolved as a front runner in enabling project optimization. We partner with leading organizations to provide technology solutions within the financial, insurance, education, government, publishing, healthcare and pharmaceutical domains. We take pride in mentoring a workforce that is well positioned to respond to the emerging IT trends and needs. With the employees at the crux of every business endeavor, our success is driven by our expertise in pairing the right talent with the best jobs in the technology sector. We forge long term, personalized relationships with our employees to advance their career to the next level. We engage them in technology centric client projects that provide opportunities for them to evolve, innovate and deliver world class products and services. Our career opportunities offer challenging assignments and exposure to emerging and cutting edge technologies. We are committed to providing our employees with the tools necessary to accelerate their career progression, while maintaining a healthy, work-life balance. We are deeply committed to providing a workplace ambience that is both challenging and fulfilling.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.careerjet.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:38 min

Using language models to self-detect and flag software vulnerabilities

Julian Totzek-Hallhuber Julian Totzek-Hallhuber · WWC Europe 2026

11:18 min

Addressing audience questions on security and microservice architectures

Reinhard Kugler · LIVE

5:02 min

Mapping distributed compute paradigms to modern vehicles

Joachim Werner · LIVE

14:14 min

Addressing audience inquiries on analytical implementation and career growth

Julian Joseph · LIVE

3:48 min

Leveraging multi-agent systems for autonomous software testing

Ondřej Gróf Ondřej Gróf · WWC Europe 2026

4:23 min

Boosting security operations center productivity with intelligent data analysis

Chris Wysopal Chris Wysopal +2 · WWC 2024

Videos

See all

Related articles

See all