SOC Analyst II

Kforce has a client that is seeking a SOC Analyst II in Irving, TX. Duties Include:

• Investigate and manage escalated cybersecurity alerts and incidents across endpoint, network, identity, email, and cloud environments
• Lead containment, remediation, and recovery activities for security incidents
• Analyze security data to determine root cause, scope, impact, and appropriate response actions
• Develop and tune security detections, alerts, and automated response workflows
• Conduct threat hunting and use threat intelligence to identify potential risks and improve monitoring
• Collect and analyze forensic evidence and document investigation findings
• Mentor junior analysts and serve as a technical escalation resource
• Maintain incident response procedures, playbooks, and security documentation
• Support continuous improvement of security monitoring, detection, and response capabilities

Requirements:

• 3-5 years of cybersecurity experience, including experience in security operations, incident response, or a related area
• Hands-on experience investigating security incidents using SIEM, EDR, and other security monitoring tools
• Knowledge of Windows, Linux, identity systems, networking, and common security log sources
• Experience with incident response, threat detection, and MITRE ATT&CK concepts
• Experience developing or tuning security queries and detection rules
• Familiarity with scripting or automation using Python, PowerShell, or similar technologies
• Strong analytical, troubleshooting, documentation, and communication skills
• Ability to mentor junior analysts and coordinate incident response activities

Preferred Qualifications:

• Cybersecurity certifications such as CompTIA CySA+, GCIH, GCIA, or similar credentials
• Experience with cloud and SaaS security environments
• Experience with SOAR, threat hunting, attack simulation, or security automation
• Familiarity with tools such as Splunk, Cortex, ServiceNow, Jira, or comparable technologies