Defianx Logo

Defianx

SOC Tier 2 Analyst

Posted 3 Days Ago
Be an Early Applicant
Remote
Hiring Remotely in USA
Entry level
Remote
Hiring Remotely in USA
Entry level
Conducts advanced cybersecurity investigations and incident response within a Security Operations Center. Responsibilities include threat hunting, malware triage, forensic review, log analysis, threat intelligence correlation, and technical response coordination. The analyst leads moderate-severity incidents, guides Tier 1 analysts, and improves detection engineering through alert-rule refinement and monitoring-content development. The role requires expertise in SIEM, EDR, network and cloud security, attack frameworks, incident response, and digital evidence collection.
The summary above was generated by AI

This is a remote position.

The SOC Tier 2 Analyst serves as the primary investigative and response resource within the Security Operations Center. This position is responsible for conducting deeper investigations of escalated incidents, validating potential threats, performing threat hunting activities, and coordinating technical response efforts.

Tier 2 Analysts analyze complex attack patterns across multiple systems and data sources. They correlate information from endpoints, networks, cloud platforms, identity services, and threat intelligence feeds to determine the scope, severity, and business impact of potential incidents.

The analyst is responsible for performing advanced log analysis, malware triage, forensic review, and threat intelligence correlation. The position frequently serves as the technical lead during moderate severity incidents and provides guidance to Tier 1 analysts during investigations.

Tier 2 Analysts also contribute to detection engineering efforts by improving security monitoring content, developing detection logic, refining alert rules, and recommending improvements to SOC operations.

Requirements

Candidates must possess advanced knowledge of cybersecurity operations, threat detection methodologies, incident response procedures, attack frameworks, and threat actor tactics, techniques, and procedures.

The candidate should have strong experience with SIEM platforms, EDR platforms, network security monitoring, cloud security technologies, threat intelligence platforms, and incident management processes. Experience investigating ransomware, phishing campaigns, credential theft, insider threats, and cloud security incidents is highly desirable.

The position requires the ability to analyze large volumes of data, identify subtle indicators of compromise, and make informed decisions under pressure. Candidates should understand MITRE ATT&CK, threat hunting methodologies, detection engineering principles, and digital evidence collection.

Typical certifications include CySA+, GCIA, GCIH, GCED, CASP+, CISSP, or equivalent.


The candidate must have a minimum of
Secrete Clearance. 



Benefits

At Defianx, we believe that great people build great outcomes. We are committed to supporting our employees with a competitive benefits package designed to promote health, professional growth, work-life balance, and long-term career success. Eligible employees have access to medical benefits, paid time off, paid holidays, professional development opportunities, certification support, and flexible work arrangements based on customer and operational requirements.

As a growing cybersecurity company, we invest in our team by fostering a collaborative culture that values continuous learning, innovation, and excellence. Employees are encouraged to expand their technical expertise, pursue industry certifications, contribute to mission-critical initiatives, and grow their careers alongside the company's success. Defianx is committed to creating an environment where talented professionals can thrive while delivering exceptional value to our customers.



Similar Jobs

Mid level
Information Technology • Security • Software • Cybersecurity
Serve as a client-facing Tier 2 SOC Analyst supporting detection strategy, alert tuning, threat detection, and attack surface reduction. Responsibilities include reducing alert fatigue, managing MDR provider feedback loops, implementing SentinelOne rules, mapping detections to security frameworks, coordinating remediation, prioritizing vulnerabilities, reporting metrics, and improving identity and privileged-account controls. The role requires AI tools, SIEM and EDR experience, knowledge of attacker tactics, and strong technical communication.
Top Skills: Artificial IntelligenceCyber Kill ChainEdrProofpointSentineloneSIEMSplunk
Senior level
Information Technology • Security • Software • Cybersecurity
Serve as a Tier 2 SOC Analyst to transform detection strategy, tune and document alerts, reduce alert fatigue, map detections to frameworks, coordinate with MDR and threat hunting, perform attack-surface reduction and vulnerability prioritization, and drive cross-functional remediation using SIEM/EDR tools.
Top Skills: Cyber Kill ChainEdrMdrProofpointSentineloneSIEMSplunk
47 Minutes Ago
In-Office or Remote
District of Columbia, USA
258K-624K Annually
Expert/Leader
258K-624K Annually
Expert/Leader
Artificial Intelligence • Cloud • Information Technology • Consulting
Leads HPE’s federal sales organization, setting strategy, developing teams, managing executive relationships, and driving complex government contract wins. Oversees the full sales lifecycle, including opportunity development, forecasting, pricing, negotiations, and pipeline management. Builds partnerships with federal agencies and aligns cloud, cybersecurity, data center, and infrastructure solutions with mission priorities, procurement requirements, compliance standards, and security protocols.
Top Skills: Cloud ComputingCybersecurityData Center ModernizationIt Infrastructure

What you need to know about the NYC Tech Scene

As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.

Key Facts About NYC Tech

  • Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
  • Key Industries: Artificial intelligence, Fintech
  • Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
  • Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account