SOC Analyst

Tasks Onboarding and access: create analyst accounts, validate connectivity (VPN/jump host), and assign tool roles. Incident coordination: initiate incident bridge, coordinate stakeholders, maintain timeline, and drive decision capture.

Title: SOC Analyst
Location: Remote
Duration: 6+ months with a possibility of extension
 
Experience:  2 to 5 years' experience working a SOC
Shift: Su, M, T, W, Th - 3rd shift - 12 am - 6 am
 
Job Description:
 
Summary of Project

• Provide analyst coverage to review alerts/incidents produced by customer bootstrapped monitoring setup.
• Coordinate incident response decisions and escalation, including IT/OT coordination as applicable.
• Establish minimum runbooks, reporting, and operational governance required for operation.

 
Tasks

• Onboarding and access: create analyst accounts, validate connectivity (VPN/jump host), and assign tool roles.
• Service Desk Priority 1 On Call Rotation
• Expected Shift Work
• Willing to work holidays if necessary
• Alert understanding and triage: acknowledge, enrich, classify, and route alerts; create cases/tickets as defined.
• Incident coordination: initiate incident bridge, coordinate stakeholders, maintain timeline, and drive decision capture.
• Escalation management: follow the escalation matrix and severity model; notify on-call roles and vendors as required.
• Reporting: daily operational summary and incident reports (including post-incident review).
• ENVIRONMENT:
• CrowdStrike, Nozomi, Fortinet, and Fortigate FWs.
• CrowdStrike is the SIEM, EDR and VM