Cyber SOC/IR Analyst

Job Description

This role will triage security alerts, strengthen threat detection, and automate investigation workflows using tools such as SPL, KQL, and SOAR. The ideal candidate will help reduce false positives, improve alert quality, and streamline security investigations.

Skills and Requirements

1–4 years SOC, Incident Response, or Cybersecurity Operations SIEM experience: Splunk, Sentinel, CrowdStrike NG-SIEM EDR/XDR experience

TCP/IP, DNS, HTTP/S

Phishing, malware, lateral movement Python or other scripting language Ability to parse data, call APIs, or automate tasks

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.