Security Operations Center Analyst

HonorVet Technologies is a veteran-owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline — it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there's a fit worth exploring.

Position: Security Operations Center Analyst
Location: Harrisburg, PA, 17110
Work Mode: Onsite
Duration: 5 Months
 
Job Description:
The SOC Analyst 2 performs event triage and SOC escalations to protect information technology assets through prompt threat handling. The role also supports detection engineering, threat hunting, intelligence gathering, and security investigations to improve network and security monitoring.
 
Description of Duties:

• Perform ongoing information security and network monitoring with proactive response.
• Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems.
• Investigate escalated security alerts and determine scope, root cause, and potential impact.
• Follow, create, and improve SOC playbooks and SOPs.
• Document security incidents, responses, and related information.
• Analyze logs, network captures, and endpoint telemetry to identify malicious activity and IOCs.
• Conduct initial threat hunting to identify security anomalies and adversary activity.
• Tune and optimize detection rules, alerts, and correlation logic to reduce false positives and improve detection.
• Participate in root cause analysis and lessons learned sessions.
• Monitor external event sources for security intelligence and actionable incidents.
• Provide incident response support during network and security events.
• Work various shifts to support 24/7/365 operations, including days, nights, holidays, and weekends.
• Perform other related duties as required.

 
Decision Making:

• Make timely decisions on the appropriate response to security alerts.
• Escalate unique issues or problems to the supervisor.
• Follow established standards and schedules.

 
Essential Functions:

1. Use personal computer/laptop with Microsoft Office products and other business software.
2. Analyze and interpret various information.
3. Create queries, reports, and scripts using security coding and SIEM query languages.
4. Prioritize tasks effectively.
5. Communicate effectively orally and in writing.
6. Use troubleshooting tools and software.
7. Work independently and as a team member.

 
Required Skills:

• Create queries, reports, and scripts using security coding and SIEM query languages.
• Prioritize tasks effectively.
• Working knowledge of software troubleshooting tools.
• Analyze and interpret various information.