Cyber Security Analyst (SOC)

About the Role

Epiq is seeking a Cyber Security Analyst (SOC) to join their global Security Operations team. This role offers hands-on experience in incident response, threat hunting, insider risk, threat intelligence, detection engineering, vulnerability testing, and security automation within a Microsoft-centric environment. The team is actively incorporating automation and AI to enhance threat investigation and security operations.

Key Responsibilities

• Monitor, triage, investigate, and respond to security alerts and incidents.
• Analyze security data to determine severity, impact, and appropriate response or escalation.
• Work with Microsoft security tools and other security technologies.
• Conduct threat hunts using emerging threats, indicators of compromise (IOCs), and threat intelligence.
• Investigate insider risk and suspicious user activity.
• Participate in vulnerability testing, purple-team exercises, and detection engineering.
• Help develop and improve detection rules, security playbooks, processes, and automation.
• Collaborate with Security Engineering, Identity & Access Management, and other cybersecurity and IT teams.
• Identify opportunities to use automation and emerging technologies to improve security operations.

Requirements & Tech Stack

• Foundational knowledge of cybersecurity and incident response.
• Exposure to SIEM, EDR, antivirus, or other security tools.
• Strong investigative, troubleshooting, and analytical skills.
• An interest in threat hunting, detection engineering, security automation, or emerging threats.
• A willingness to learn, take ownership, and grow as the security environment evolves.
• Microsoft security experience is a plus, not a prerequisite.
• Experience with platforms such as Splunk, Elasticsearch, Exabeam, or other SIEM/EDR technologies can translate well.

Qualifications

• Bachelor’s degree in Cyber Security, Information Technology, Computer Science, or a related field, or equivalent practical experience, training, certifications, labs, or demonstrated cybersecurity knowledge.
• Up to 3 years of cybersecurity, security operations, or related technical experience preferred.
• Early-career candidates are encouraged to apply. Hands-on labs, coursework, workshops, certifications, personal projects, or other demonstrated cybersecurity learning can help demonstrate readiness.

Nice to Have

• Threat hunting, threat intelligence, or detection engineering exposure.
• Interest in security automation, scripting, or AI-enabled security tools.
• Microsoft SC-200, CompTIA Security+, or another relevant cybersecurity certification. (Certifications are valued but not required at the time of hire.)