Security Operations Center (SOC) Analyst
Position Summary
Charter Solutions is seeking a contract Security Operations Center (SOC) Analyst to help monitor, investigate, and respond to security events across our client's systems. This role supports day-to-day SOC operations — alert triage and remediation, threat hunting, phishing email analysis, and security tool administration — while working closely with the Cybersecurity Team to strengthen the client's overall security posture. This is a hybrid position that may require occasional after-hours work during active incidents.

Key Responsibilities
Alert Management – Log, analyze, and remediate security alerts; conduct after-action reviews and maintain clear documentation of incidents and response activities.
Threat Hunting – Proactively hunt for indicators of compromise (IOCs), monitor industry threat alerts and advisories, and investigate anomalies and suspicious IP activity.
Phishing & Email Analysis – Analyze suspicious and reported emails, including email header analysis, and identify spoofing and other phishing indicators.
Security Tools – Operate and monitor the security tool stack, including Microsoft Defender XDR, Sentinel, Entra ID, and Intune; CrowdStrike endpoint protection and NGSIEM; and Active Directory audit tools.
Ticketing – Create, update, and transfer incident tickets in ServiceNow to ensure timely tracking, escalation, and resolution.
Collaboration & Documentation – Collaborate closely with the Cybersecurity Team and broader IT staff, communicating findings clearly and maintaining thorough documentation.

Required Skills & Qualifications
Minimum of 2 years of experience in a SOC or similar security operations role.
Experience with alert triage, remediation, and after-action documentation.
Working knowledge of threat hunting: IOC analysis, industry threat intelligence, anomaly detection, and IP investigation.
Demonstrated experience analyzing phishing emails, including header analysis and spoofing identification.
Hands-on experience with Microsoft Defender XDR, Microsoft Sentinel, Entra ID, and Microsoft Intune.
Hands-on experience with CrowdStrike (endpoint protection) and Next-Gen SIEM (NGSIEM).
Experience performing Active Directory audits.
Experience using ServiceNow to create, update, and transfer tickets.
Strong collaboration and communication skills · sound problem-solving and judgment · high attention to detail · a continuous learner who stays current on the evolving threat landscape and security tooling.

Security Operations Center Analyst

Similar Analytics Jobs