Note: The job is a remote job and is open to candidates in USA. CSI Companies is a staffing and recruiting firm providing skilled professionals to organizations nationwide. The SOC Analyst II will support cybersecurity operations through advanced alert monitoring, incident triage, threat hunting, detection development, and response activities in a remote environment using Splunk Enterprise Security. The role also involves alert tuning, automation, security workflow improvement, and collaboration with cross-functional technical teams.
Responsibilities
- Perform advanced SOC analysis including alert triage incident reporting and threat hunting
- Investigate and respond to security alerts across multiple platforms
- Build and improve security detection content within Splunk Enterprise Security
- Write and tune complex SPL queries to support threat detection and investigation
- Work across ticketing and orchestration platforms to remediate alerts
- Tune alerts and reduce false positives to improve detection quality
- Manage logs and support security monitoring improvements
- Support incident response and escalation activities
- Collaborate with cross functional teams to resolve security issues
- Automate repetitive security tasks where appropriate
- Support continuous improvement of SOC processes and workflows
Skills
- Candidates must be authorized to work in the United States and eligible for W2 employment. No sponsorship and no corp to corp arrangements are available
- 5 or more years of cybersecurity experience
- 3 or more years of experience in a SOC environment
- Strong experience with incident response triage threat detection and alert tuning
- Advanced experience with Splunk Enterprise Security and Splunk Core
- Strong experience writing complex SPL queries
- Experience with email security platforms such as Proofpoint TAP or TRAP
- Experience with endpoint security platforms such as CrowdStrike Falcon
- Ability to work shift schedules as assigned
- Strong communication and collaboration skills
- Ability to work effectively with cross functional technical teams
- Strong interest in continued career growth within cybersecurity
- Experience with cloud security platforms such as Wiz or Zscaler
- Experience with Proofpoint Email Gateway
- CompTIA Security Plus certification
- CompTIA Network Plus certification
- OSCP certification
- CySA Plus certification
- Scripting experience using Python or PowerShell
- Experience using AI tools such as Claude Code Codex Cursor or large language models to solve security problems
Benefits
- Weekly pay
- Medical, dental and vision coverage
- Voluntary life and AD&D coverage
- Paid training
- Opportunity for advancement upon performance and availability
- Remote work within the United States
Company Overview