About the Role
Our client, a rapidly growing technology firm, is seeking a highly experienced Security Operations Center (SOC) Analyst - Tier 3 to join their dedicated security team. This is a fully remote position, enabling you to contribute to our client's security posture from anywhere in the United States, with a preference for candidates able to engage with teams often based in Chicago, Illinois . As a Tier 3 analyst, you will be responsible for in-depth investigation, advanced threat analysis, and mentoring junior analysts. The ideal candidate is a seasoned security professional with a passion for dissecting complex security incidents and developing innovative defensive strategies. This remote-first role is crucial for protecting our client's digital assets.
Key Responsibilities Conduct advanced investigations into complex security incidents detected by SOC tools and analysts. Analyze security alerts, logs, and network traffic to identify sophisticated threats, including APTs. Develop and refine threat detection rules, signatures, and use cases for SIEM and other security tools. Perform deep-dive malware analysis and reverse engineering. Lead the response to major security incidents, coordinating with internal teams and external stakeholders. Mentor and provide technical guidance to Tier 1 and Tier 2 SOC analysts. Stay current with the latest cybersecurity threats, attack vectors, and mitigation techniques. Contribute to the development and improvement of SOC playbooks and standard operating procedures. Generate detailed incident reports and post-incident reviews. Participate in threat hunting exercises to proactively identify hidden threats. Requirements Bachelor's degree in Cybersecurity, Computer Science, or a related field; relevant certifications (CISSP, GSEC, GCIA, GCIH) are essential. Minimum of 6 years of experience in cybersecurity operations, with at least 3 years in a Tier 2/3 SOC analyst role or similar advanced incident analysis position. Expertise in analyzing network protocols, system logs, and security tool data (SIEM, IDS/IPS, EDR). Proficiency in malware analysis, reverse engineering, and forensics. Strong understanding of adversarial tactics, techniques, and procedures (TTPs). Experience with scripting languages (Python, PowerShell) for automation and analysis. Excellent analytical, problem-solving, and critical thinking skills. Exceptional communication and leadership abilities. Ability to work independently and manage complex investigations in a Yes remote setting. Demonstrated experience mentoring junior security personnel. This Yes remote position requires a high degree of self-discipline and proactive engagement. Benefits
Our client offers a competitive salary, with annual earnings starting at , commensurate with experience. The comprehensive benefits package includes health, dental, and vision insurance, a generous 401(k) plan with employer match, life insurance, and generous paid time off. Opportunities for continuous learning and professional development are strongly supported. This Yes remote role provides an excellent opportunity to advance your career in cybersecurity operations while enjoying significant flexibility.