Soc Analyst-Mid & Senior

The ideal candidate will have experience developing and tuning detection content, creating alert logic, and leveraging scripting or coding within the Splunk platform to improve security operations. Candidates who can demonstrate authentic, hands-on experience and clearly explain their technical background will be prioritized over candidates with broad but unverified skill sets.

SOC Analyst II (L2) – Contract Position Summary
We are seeking a mid-level SOC Analyst to join a growing Cyber Defense/Security Operations team. This individual will be responsible for monitoring security events, investigating incidents, and managing tickets within a Security Operations Center (SOC) environment.

This role is ideal for candidates with hands-on Splunk experience who are comfortable working in a fast-paced operational environment and responding to security events.
Responsibilities

• Monitor and investigate security alerts and incidents
• Triage and manage security tickets through resolution
• Escalate threats and incidents appropriately
• Support day-to-day SOC operations
• Assist with alert tuning and optimization
• Collaborate with other security team members to improve detection capabilities
• Document investigations and response activities

Required Qualifications

• Experience working in a Security Operations Center (SOC)
• Hands-on experience with Splunk
• Experience investigating cybersecurity incidents
• Understanding of security monitoring and alert triage
• Knowledge of common security threats, vulnerabilities, and attack techniques
• Strong analytical and troubleshooting skills

Preferred Qualifications

• Experience configuring and tuning security alerts
• Experience integrating security tools and technologies
• Security certifications such as Security+, CySA+, GSEC, or similar

Experience Level

• Mid-level
• Approximately 2-5 years of relevant cybersecurity experience

Work Arrangement

• Onsite
• Daytime business hours

---

SOC Analyst III (L3) – Contract Position Summary
We are seeking a Senior SOC Analyst to support an expanding Cyber Defense program. This role requires advanced Splunk expertise and a strong background in detection engineering, threat detection, and security monitoring.

The ideal candidate will have experience developing and tuning detection content, creating alert logic, and leveraging scripting or coding within the Splunk platform to improve security operations.
Responsibilities

• Lead investigation and response efforts for complex security incidents
• Develop and maintain detection rules and use cases
• Build, tune, and optimize security alerts
• Perform detection engineering activities within Splunk
• Support continuous improvement of monitoring capabilities
• Mentor junior analysts as needed
• Partner with broader security teams to improve visibility and threat detection

Required Qualifications

• Advanced Splunk experience
• Experience with detection engineering
• Experience creating and tuning detection rules
• Experience developing security alerts and monitoring content
• Scripting or coding experience within the Splunk environment
• Strong understanding of cybersecurity operations and incident response

Preferred Qualifications

• Experience with SIEM content development
• Threat hunting experience
• Knowledge of MITRE ATT&CK framework
• Security certifications such as GCIH, GCIA, CySA+, CISSP, or similar

Experience Level

• Senior
• Approximately 5+ years of cybersecurity or SOC experience

Work Arrangement

• Onsite
• Daytime business hours

---

Recruiter Screening Notes For L2 Candidates
Focus on:

• SOC operations experience
• Splunk monitoring and investigations
• Incident response
• Alert triage
• Ticket management

For L3 Candidates
Focus on:

• Advanced Splunk expertise
• Detection engineering
• Alert and rule development
• SIEM content creation
• Scripting/coding within Splunk
• Complex incident investigation

Interview Process

• Initial virtual interview
• Final onsite interview

Candidate Validation
The hiring manager emphasized the importance of verifying hands-on technical experience. Recruiters should thoroughly screen candidates and confirm they can clearly articulate:

• Their direct contributions
• Technologies used
• Detection and response experience
• Splunk-specific responsibilities

Detailed screening notes are highly encouraged with all submissions.
Ideal Submission
Candidates who can demonstrate authentic, hands-on experience and clearly explain their technical background will be prioritized over candidates with broad but unverified skill sets.