SOC Analyst
VIVA · Harrisburg, PA, US
Apply directly on VIVA’s careers site — no account needed.
About the role
Position Purpose:
The SOC Analyst 2 performs event triage and internal SOC escalations to protect the confidentiality, integrity, and availability of the client’s information technology assets through prompt and accurate threat handling, while also identifying and closing security gaps through detection engineering, threat hunting, intelligence gathering, and investigation, thereby contributing to the continuous improvement of network and security monitoring.
Description of Duties:
Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems.
Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems, ensuring accurate documentation of incoming data.
Perform security investigation for alerts escalated within the Security Operation Center, determining full scope, potential root cause, and potential impact.
Follow, create, and improve established playbooks and SOPs used by the SOC.
Document security incidents, responses, and related information in accordance with established procedures
Analyze advanced logs, network capture, end-point telemetry to identify malicious activity and indicators of compromise (IOCs)
Conduct initial threat hunting to proactively identify security anomalies and adversary activity
Conduct tuning and optimization of existing detection rules, alerts, and correlation logic to reduce false positives and improve detection fidelity.
Participate in root cause analysis or lessons learned sessions.
Monitor external event sources for security intelligence and actionable incidents
Provide incident response support as needed and directed during network and security events providing support for incident resolution.
Maintain flexibility to work in various shift rotations to support 24/7/365 operations, including days, nights, holidays, and weekends.
Performs other related duties as required.
Decision Making:
Make informed and timely decisions on the appropriate response to security alerts.
Unique issues or problems may be escalated to supervisor.
Work is reviewed periodically for adherence to established standards and established schedules.
Essential Functions:
1. Use personal computer/laptop with Microsoft Office products and other business software
2. Analyze and interpret various information
3. Create queries, reports and scripts leveraging current security coding and SIEM query languages
4. Prioritize tasks effectively.
5. Communicates effectively orally and in writing.
6. Working knowledge of troubleshooting tools (software)
7. Work independently and as a team member
Skill - Required / Desired
Create queries, reports and scripts leveraging current security coding and SIEM query languages - Required
Prioritize tasks effectively. - Required
Working knowledge of troubleshooting tools (software) - Required
Analyze and interpret various information - Required
Notes:
Onsite
VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
The SOC Analyst 2 performs event triage and internal SOC escalations to protect the confidentiality, integrity, and availability of the client’s information technology assets through prompt and accurate threat handling, while also identifying and closing security gaps through detection engineering, threat hunting, intelligence gathering, and investigation, thereby contributing to the continuous improvement of network and security monitoring.
Description of Duties:
Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems.
Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems, ensuring accurate documentation of incoming data.
Perform security investigation for alerts escalated within the Security Operation Center, determining full scope, potential root cause, and potential impact.
Follow, create, and improve established playbooks and SOPs used by the SOC.
Document security incidents, responses, and related information in accordance with established procedures
Analyze advanced logs, network capture, end-point telemetry to identify malicious activity and indicators of compromise (IOCs)
Conduct initial threat hunting to proactively identify security anomalies and adversary activity
Conduct tuning and optimization of existing detection rules, alerts, and correlation logic to reduce false positives and improve detection fidelity.
Participate in root cause analysis or lessons learned sessions.
Monitor external event sources for security intelligence and actionable incidents
Provide incident response support as needed and directed during network and security events providing support for incident resolution.
Maintain flexibility to work in various shift rotations to support 24/7/365 operations, including days, nights, holidays, and weekends.
Performs other related duties as required.
Decision Making:
Make informed and timely decisions on the appropriate response to security alerts.
Unique issues or problems may be escalated to supervisor.
Work is reviewed periodically for adherence to established standards and established schedules.
Essential Functions:
1. Use personal computer/laptop with Microsoft Office products and other business software
2. Analyze and interpret various information
3. Create queries, reports and scripts leveraging current security coding and SIEM query languages
4. Prioritize tasks effectively.
5. Communicates effectively orally and in writing.
6. Working knowledge of troubleshooting tools (software)
7. Work independently and as a team member
Skill - Required / Desired
Create queries, reports and scripts leveraging current security coding and SIEM query languages - Required
Prioritize tasks effectively. - Required
Working knowledge of troubleshooting tools (software) - Required
Analyze and interpret various information - Required
Notes:
Onsite
VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
Description sourced from the public Indeed listing — this role isn't indexed from the company's career page yet.
Skills
- SIEM
- Python
- SQL
- Jira
- Confluence
Never be applicant #200 again
Every job here is indexed straight from company career pages — often hours after it opens, before it reaches the big boards. Create a free account and get your best matches in a twice-daily digest.
- Your best matches, twice a day
- No duplicates, no ghost jobs, no recruiter spam
- Every job free to browse — pay only when you apply
Get my matched jobs
Free account — no card required
93 142 live jobs · 17 643 companies tracked · 34 added today