Security Operations Center Analyst

Remote
- Austin, Texas, United States
- Boston, Massachusetts, United States
- Chicago, Illinois, United States
- Columbus, Ohio, United States
- Dallas, Texas, United States
- Detroit, Michigan, United States
- Florida City, Florida, United States
- Houston, Texas, United States
- Indianapolis, Indiana, United States
- Kansas City, Missouri, United States
- Kirkland, Washington, United States
- Los Angeles , California, United States
- Miami, Florida, United States
- Milwaukee, Wisconsin, United States
- Minneapolis–Saint Paul, Minnesota, United States
- New York, New York, United States
- Newark, New Jersey, United States
- Sacramento, California, United States
- San Francisco, California, United States
- San Jose, California, United States
- Seattle, Washington, United States
- St. Louis, Missouri, United States
- Tampa, Florida, United States
- Richmond, Virginia, United States
- Islamabad, Islamabad, Pakistan
- Punjab, Punjab, Pakistan
- Karachi, Balochistan, Pakistan
- Guadalajara, Jalisco, Mexico
- León, Guanajuato, Mexico
- Mexico City, Ciudad de México, Mexico
- Monterrey, Nuevo León, Mexico
- Querétaro City, Querétaro, Mexico
- Tijuana, Baja California, Mexico
+32 more
Engineering

-Remote role
-Shift based schedule

Job description

At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking an Security Operations Center Analyst specialist to join one of our clients' teams. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you.

Job requirements

Key Responsibilities:

Monitor, investigate, and triage security alerts across multiple customer environments.
Rapidly respond to active attacks and security threats to reduce organizational risk.
Escalate incidents when a conclusive determination cannot be made (true threat or false positive).
Utilize Microsoft Sentinel, M365 Defender, and Azure security products for threat detection, investigation, and response.
Develop, refine, and execute Kusto Query Language (KQL) queries.
Maintain awareness of cyberthreats, attack vectors, and industry best practices.
Work collaboratively within a team-oriented SOC environment.
Document incidents, findings, and remediation steps clearly and professionally.
Participate in ongoing knowledge building, training, and process improvement efforts.

Requirements

Experience & Skills:

3+ years of experience working in a Security Operations Center or similar cybersecurity role.
Prior hands-on experience with:
- Microsoft Sentinel
- M365 Defender Suite
- Azure Security Products
Strong understanding of cyberattack vectors, incident response methodologies, and security operations workflows.
Working knowledge of Kusto Query Language (KQL).
Excellent verbal and written communication skills in English.
Strong organizational skills, attention to detail, and ability to work in fast-paced environments.
Previous experience working in collaborative, team-based environments.
Comfortable appearing on camera for meetings, trainings, and client engagements.
Stable high-speed internet connection suitable for VoIP communication and screen sharing.
Ability to work from a home office within the United States.

Certifications:

Security+ (required)
Microsoft SC-200 (required)