> Markdown version of [/jobs/ext/4601154-security-operations-center-analyst-ii](https://www.wearedevelopers.com/jobs/ext/4601154-security-operations-center-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Operations Center Analyst II - **Company:** Spectraforce - **Location:** Nashville, TN, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Software System Penetration Testing, Microsoft Azure, BitLocker Drive Encryption, Unix, Cyber Security, Data Security, Internet Security, Intrusion Detection and Prevention, Intrusion Detection Systems, Network Security, Microsoft Office, System Center Configuration Manager, Zero Trust Network Access, Security Information and Event Management, Web Applications, Computer Networking Systems, Okta, Office365, Malware, Firewalls (Computer Science), Falcon Platform, Cybercrime, Nexpose, Web Technologies, Splunk, Cisco, Servicenow, Vulnerability Analysis - **Published:** November 6, 2026 - **Apply:** http://leoforce.us/Careers/Spectraforce/JobDetails.html?jobid=7b89d88e-9e82-4865-bf99-e7f96c1dd6ac&OrgId=1&UserId=4580 ## About the Role * 5+ years working in the Security operations Centre. * Bachelor's degree in engineering or higher preferred * Excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security) * Ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc) * Knowledge of cutting edge threats and technologies effecting Web Application vulnerabilities and recent internet threats * Exposure on Vulnerability assessment as well as penetration testing or forensic analysis fields are an advantage * Experience working as part of a global team, spanning multiple time zones and cultures. Certifications/Preferred Skills Desired * Certifications preferred: CEH MACHINES, EQUIPMENT, AND SOFTWARE: Required: MS Office Strongly Preferred: Cisco Network devices, Nexpose or Insight VM, Splunk, Crowdstrike, SCCM, Bitlocker, Zscaler, Proofpoint, Service Now, Trendmicro, Okta, Azure, O365. PHYSICAL DEMANDS AND WORKING CONDITIONS: Office work, possible international travel up to 5% ## Description The Security Operations Center Information Security Analyst II will be part of the SOC Team. This center monitors, analysis and responds to infrastructure threats and vulnerabilities on a 24x7 basis * Lead the analysis and investigation of information security events (IDS/Proxy/SIEM/etc.) in a 24X7 SOC environment to immediately detect, verify, and respond swiftly to cyber threats, and remove false positive. Strong networking background. * The analyst performs monitoring, research, assessment and analysis which requires demonstrable security incident response experience. * Serve as a technical point of escalation and provide mentoring for L1 Security Operations Center (SOC) analysts. * Handling security alerts on Splunk SIEM and Raise tickets based on the alerts. * Follow ups with respective team to close the alerts, tickets. * Analyze and assess security incidents and escalate to appropriate internal teams for additional assistance. * Responsible for investigating incidents, analyzing attack methods, researching new defense techniques and tools, developing security policy, and documenting procedures for SOC. * Malware analysis and other attack analysis to extract indicators of compromise. Perform data security event correlation between various systems. * Prepare reports, summaries, and other forms of communication that may be both internal and client facing. * Maintain familiarity with industry trends and security best practices. * Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives. * Periodic upgradation/creation of correlation rules based on emerging threats and requirement following MITRE Attack US-Cert and other TTP sources.