SOC Analyst

Position: SOC Analyst
Position Type: Direct hire
Location: Remote (Oklahoma preferred)

Position Summary
Our client is looking for a SOC Analyst to join their SOC team. This role is ideal for cybersecurity professionals who thrive in fast-paced, high-stakes environments and are passionate about detection, investigation, and response to cyber threats. You will work with cutting-edge security technologies, including Cortex XDR, Cortex XSIAM, and Prisma Access, to protect our customers’ on-premise and cloud environments.

Key Responsibilities:

• Threat Monitoring & Triage – Analyze security alerts in Cortex XDR/XSIAM, prioritize incidents, and escalate as necessary.
• Incident Response – Investigate, contain, and remediate cyber threats.
• Threat Hunting – Proactively search for indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) using Cortex analytics and custom queries.
• Forensic Analysis – Conduct endpoint and network forensic investigations to determine attack vectors and impact.
• SIEM & Logging Optimization – Work with security engineers to improve log collection, correlation, and detection rules in Cortex XSIAM.
• Customer Collaboration – Provide clear, professional communication with customers regarding security incidents, findings, and remediation steps.
• Process Improvement – Contribute to SOC automation, playbook enhancements, and detection rule tuning.
• Threat Intelligence Integration – Apply threat intelligence feeds to enrich investigations and improve detections.

Qualifications & Experience
Required:

• 2+ years of experience in a Security Operations Center (SOC) or similar role.
• Familiarity with Cortex XDR, SIEM platforms, other EDR/XDR solutions, and some network security technologies.
• Understanding of the MITRE ATT&CK Framework.
• Experience analyzing security alerts, investigating threats, and escalating incidents.
• Experience in log analysis, threat hunting, and incident response processes.
• Strong critical thinking, problem-solving, and communication skills.

Preferred:

• Experience working with Cortex XSIAM or Prisma Access.
• Scripting skills (Python, PowerShell, or Bash) for automation.
• Understanding of cloud security (Azure, AWS, Google Cloud Platform) and hybrid environments.
• Certifications such as Palo Alto Networks PCCET, PCNSE, or PCSAE, or industry-recognized certs like Security+, CySA+, IA.

To learn more about this opportunity call us at .
Apply online at ArchonResources.com.

TULIT