SOC Analyst

About The Role

SOClogix, Inc. is seeking a Cybersecurity Operations Analyst to support the monitoring and protection of client environments. In this role, you will review security alerts, assess potential incidents, and help coordinate timely responses. You will work with security tools, operational procedures, and technical teams to investigate events and communicate findings. The position is suited to someone who is analytical, methodical, and comfortable working in a changing threat landscape. You will have opportunities to build technical expertise, improve investigative processes, and contribute to the ongoing development of security operations capabilities.

Key Responsibilities

• Monitor security alerts and event data across assigned systems, identify activity that may indicate a threat, and perform initial triage using documented procedures.
• Investigate suspicious events by gathering relevant logs, endpoint information, network details, and other available evidence.
• Record findings accurately, assign appropriate severity, and escalate confirmed or potentially serious incidents to the designated response teams.
• Support incident response activities by maintaining clear case notes, tracking actions, and following established communication and escalation protocols.
• Help identify recurring alert patterns, false positives, and gaps in monitoring, and share recommendations with the team.
• Maintain awareness of relevant vulnerabilities, threat trends, and defensive practices.
• Contribute to operational documentation, playbooks, and knowledge resources, and help ensure that procedures remain clear and current.
• Coordinate professionally with colleagues and, when appropriate, client contacts to clarify events and communicate status.
• Protect confidential information and follow company and client security policies.
• Participate in training, team discussions, and process improvement efforts.
• Perform other security operations duties consistent with the role and business needs.

Requirements & Tech Stack

• Foundational understanding of cybersecurity concepts, including common attack techniques, security monitoring, incident handling, and risk reduction.
• Familiarity with security information and event management (SIEM) platforms, endpoint detection tools, ticketing systems, or threat intelligence resources is an advantage.
• Experience in a security operations center, information technology support, network administration, or a related technical environment is beneficial.
• Comfort reviewing logs and technical information.
• Ability to follow established procedures.
• Ability to document work clearly.

Qualifications

• Strong written and verbal communication skills.
• Sound judgment.
• Attention to detail.
• Discretion when handling sensitive information.
• Willingness to ask questions and learn.
• Ability to collaborate with colleagues.
• Ability to communicate technical findings to different audiences.
• Ability to manage priorities.
• Ability to remain composed when addressing urgent issues.
• Ability to adapt as tools, procedures, and threats change.
• A relevant degree, professional training, or industry certification in cybersecurity, information technology, or a related discipline is preferred, but equivalent practical experience will also be considered.