> Markdown version of [/jobs/ext/4391505-it-security-associate](https://www.wearedevelopers.com/jobs/ext/4391505-it-security-associate). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Associate

- **Company:** Experis
- **Location:** Charlotte, NC, United States
- **Experience:** Experienced
- **Salary:** $114,400.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Proxy Servers, Cloud Computing, Linux, Network Security, Security Information and Event Management, Windows Desktop, Mitre Att&ck, Firewalls (Computer Science), Cybercrime
- **Published:** October 31, 2026
- **Apply:** https://www.experis.com/en/job/416761/it-security-associate

## About the Role

Our client, a leading organization in cybersecurity operations, is seeking a IT Security Associate to join their team. As a IT Security Associate, you will be part of a high-performing SOC environment supporting monitoring, investigation, and continuous improvement of security capabilities. The ideal candidate will bring strong analytical thinking, a drive to investigate root causes, and the motivation to refine detections and response processes to stay ahead of an evolving threat landscape., + 4+ years of experience in cyber security, ideally within a SOC, DFIR, or CSIRT role.

 + Strong verbal and written communication skills, including the ability to document findings at a high level.
 + Self-directed work style with the ability to operate independently while collaborating effectively with SOC and incident response teams.
 + Strong technical knowledge of security controls and tooling, including SIEM, EDR, NDR, XDR, and UEBA, plus incident response analytical skills.
 + Working knowledge of network security concepts and tools (e.g., firewalls, proxy servers, email security, and suspicious traffic flows) and familiarity with Windows and Linux systems, Active Directory, and cloud technologies.

## Description

+ Act as a core member of the SOC, supporting cyber monitoring & response, purple teaming, threat hunting, digital forensics, and incident response activities.
 + Analyze security alerts and respond to security events and incidents by investigating to identify root cause and the control gaps that allowed threats to progress through the kill chain.
 + When an incident is identified, perform technical analysis and track threat actor actions as part of the incident response process with support from SOC and CSIRT teams.
 + When activity is determined to be a false positive, drive detection tuning and refinement and recommend improvements to preventative controls to reduce recurrence and improve SOC efficiency.
 + Maintain and update monitoring & response playbooks, conduct proactive threat hunting, and test new adversary TTPs to validate detection and response effectiveness.
What's Needed?