Skip to content
CTS

SOC Engineer (Level 2)

Remote, USA; Remote - USARemote · United States
Mid-level · Service Delivery
POSTED 20 AUGVERIFIED 19H AGO
Apply Ask
Role
85 days opentrue age
Posted 20 Aug
Pay
$112k–$150kno pay posted
Market p25–p75
$112k–$150k
United States · n=511 · 365d to 12 Nov
CompanyCTS →
2open roles
Opened · 30d
+0
Closed · 30d
−0
4d of snapshots · 30d window
Market
1,686open · Mid-level Software engineering
Opened · 7d
+1066% of open
All software engineering
74,727open
All tracked boards · live 14 Nov · n=1,686
PythonAWSAzure

CTS delivers comprehensive IT solutions to meet the unique demands of mission-driven organizations. We have deep expertise in supporting nonprofits and educational institutions, however our team is equipped to handle the complexities of IT across a variety of sectors. We’re committed to making technology work seamlessly, so our clients can focus on making a difference, regardless of their industry.

At CTS, we believe in building a company culture that fosters growth, collaboration, and innovation. By joining our team, you will not only help empower businesses with cutting-edge IT solutions but also build a rewarding career in a dynamic and supportive environment. Discover the many reasons why CTS is a great place to advance your career. We are headquartered in Brooklyn, NY with 90+ employees across the US and several other countries. Learn more about us at https://www.charterts.com

JOB SUMMARY

We are looking for an experienced SOC Engineer - Level 2 to join our Security Operations Center (SOC) team. As a Level 2 SOC Engineer, you will play a critical role in monitoring, analyzing, and responding to security incidents. You will be responsible for handling more complex security threats, guiding Level 1 engineers, and contributing to the overall security posture of the organization. This role requires strong technical expertise, excellent analytical skills, and the ability to work in a fast-paced environment

KEY RESPONSIBILITIES

• Advanced Threat Detection and Response: Monitor and analyze security alerts and incidents, conduct in-depth investigations, and respond to complex security threats, ensuring they are mitigated effectively.

• Incident Management: Take the lead in managing security incidents, coordinating with other IT and security teams to contain, eradicate, and recover from security breaches.

• Forensic Analysis: Perform detailed forensic analysis on compromised systems to identify root causes, attack vectors, and indicators of compromise (IOCs).

• Vulnerability Management: Assist in the identification, assessment, and remediation of vulnerabilities within the organization’s infrastructure.

• Security Tool Management: Maintain and optimize security tools and technologies, including SIEM, IDS/IPS, firewalls, and endpoint protection systems.

• Collaboration: Work closely with Level 1 SOC Engineers, providing guidance, mentorship, and training to help them improve their skills and effectiveness in responding to security incidents.

• Documentation: Create and maintain detailed documentation of security incidents, forensic analysis, and response actions, ensuring compliance with organizational policies and industry standards.

• Reporting: Generate and analyze security reports, providing insights and recommendations to improve the organization’s security posture.

• Continuous Improvement: Stay updated on the latest cybersecurity threats, vulnerabilities, and best practices, and contribute to the ongoing improvement of SOC processes and technologies.

• On-Call Support: Participate in a rotating on-call schedule to provide after-hours support for critical security incidents.

TECHNICAL REQUIREMENTS

Proven expertise in the following areas is required:

- Strong knowledge of security monitoring tools (e.g., SIEM, IDS/IPS) and their configuration and management.

- Proficiency in network security, endpoint security, and incident response techniques.

- Experience with forensic tools and methodologies for analyzing compromised systems.

- Familiarity with scripting and automation (e.g., Python, PowerShell) to streamline security processes.

- Knowledge of cloud security practices and tools (e.g., AWS, Azure) is a plus.

QUALIFICATIONS

• Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.

• Experience: 3-5 years of experience in a SOC or cybersecurity role, with at least 1-2 years at a Level 2 position or equivalent.

• Certifications: Relevant certifications such as CompTIA Security+, CompTIA CySA+, or equivalent are preferred.

Source · CTSFirst seen 7 Nov1 editsOriginal ↗