SOC L3 Analyst
$60 pr hr on W2
100% Remote
W2 Candidates – Visa open - preference is for Candidates from EST CST or MST
OPTs are also fine
Shift Details: (6 PM to 6 AM - Hybrid rotating shift work - 24x7x365 support preferred)
Required Skills:
SIEM/XSIAM; senior SOC operations; complex incident investigation and response; threat hunting; detection engineering; incident escalation; root-cause analysis; playbook development; cross-functional remediation; mentoring and knowledge transfer.
Typically 5–8 years of relevant cybersecurity or SOC experience, with advanced incident response and security monitoring experience. Relevant certifications may include GCIH, GCIA, GCFE, GCDA, CISSP, or equivalent.
Preferred Skills: Palo Alto; Fortinet; Tenable; Rapid7; Cribl; Cortex; advanced SIEM, EDR/XDR, SOAR, network, identity, and cloud security; MITRE ATT&CK and NIST; relevant GIAC, CISSP, or equivalent certifications.
Responsibilities:
Serve as a senior escalation point for Tier 1 and Tier 2 analysts and lead investigations of complex or high-visibility incidents. Analyze threats across endpoint, network, identity, cloud, application, and data environments; coordinate containment, eradication, and recovery; perform threat hunting, detection tuning, and root-cause analysis; document findings and remediation recommendations; develop knowledge articles and training pathways; mentor junior and peer technicians; support backup/recovery and backend troubleshooting as required.
Expected Deliverable(s):
Incident investigation documentation and recommendations; improved detection content and response playbooks; knowledge articles and training materials; documented technical guidance and escalations; and contributions to SOC process and monitoring improvements. Confirm measurable deliverables and acceptance criteria with the engagement team.
