Cybersecurity SOC Analyst

Title: Cybersecurity Analyst

Location: Little Rock, AR (Hybrid)

Fulltime with ComTec

Shift 1 (Day): 6:00 AM to 6:00 PM (12 hrs on Sunday, Monday, Tuesday, and 12 hrs every alternate Saturday)

Shift 2 (Day): 6:00 AM to 6:00 PM (12 hrs on Wednesday, Thursday, Friday, and 12 hrs every alternate Saturday)

Onsite: Day Shift resources need to go onsite 2 days a week

ComTec is seeking a Cybersecurity Analyst to support security monitoring, alert analysis, threat detection, and incident response within a SOC environment. The role involves analyzing SIEM and firewall alerts, reviewing logs, investigating potential incidents, and detecting phishing attempts to help protect critical IT infrastructure.

Key Responsibilities:

• Monitor and review security alerts from SIEM, firewalls and other security tools, and investigate potential malware, phishing, and unauthorized-access activity.
• Analyze relevant logs and alert data to help identify incident causes, scope, and potential impact.
• Support threat-hunting activities by analyzing alerts from SIEM and firewalls and gather threat intelligence to inform security monitoring.
• Assist with developing and updating detection rules, response playbooks, and SOAR workflows based on investigation findings.
• Use the MITRE ATT&CK framework to help interpret alerts and threat activity.
• Participate in attack simulations and tabletop exercises to improve SOC readiness.
• Prepare incident reports and post-incident documentation and contribute to lessons-learned reviews.
• Stay informed about emerging threats and the use of AI and Agentic AI in cybersecurity.
• Participate in an on-call rotation approximately every 4–6 weeks.
• Be willing to travel up to 25% for training and incident support.

Required Skills:

• 2+ years of cybersecurity experience in key areas such as asset management, threat and vulnerability management, and incident response.
• Familiarity with SIEM, SOAR, IDS/IPS, and forensic tools.
• Familiarity with security monitoring platforms such as Splunk and CrowdStrike.
• Understanding of adversary tactics using the MITRE ATT&CK framework.
• Experience with email security tools and phishing detection.
• Ability to analyze advanced cyber threats and support investigations.
• Familiarity with regulations like SOX and NERC CIP and experience supporting audits or assessments.
• Ability to perform data analysis, integration, and validation activities related to security operations.
• Basic knowledge of cloud, ICS, OT, and network security principles.
• Understanding of AI and Agentic AI tools used in cybersecurity.
• Collaborative team player with strong analytical and communication skills.
• Self-motivated, resourceful, and customer-focused with a strong sense of ownership.
• Certifications such as CompTIA, GIAC, ISC2 are a plus.