Security Operations Center; SOC) Analyst

Security Operations Center (SOC) Analyst Why this role matters

Our clients trust us to keep them secureand productive. As a SOC Analyst, you’ll monitor and remediate security alerts across multiple client environments, respond to cyber incidents, escalating effectively, and close the loop with clear documentation and Security RCAs. Reporting to the Director of Central Services, you’ll work closely with our Service Desk,NOC, Client Solutions, and Professional Services teams to uphold our security baseline, improve response processes, and reduce recurring support needs through proactive remediation and automation.

• Remediate, monitor andtriage alerts: Monitor the Security Queue, CW Automate, and security mailboxes. Classify and remediate general alerts,confirm business impact, create and assign tickets when required, escape complex or critical alerts according to established procedures, and document every response and resolution in the ticketing system.
• CVE and vulnerability intake: Review security forums, message boards, community pages, and vendor press pages for imminent threats. Triage CVE vulnerability notifications by creating tickets and assigning them to NOC Analysts when necessary.
• Incident response: Identify the severity of each cyber incident, remediate standard incidents, and escalate ma jorincidents to Expert Analysts according to the escalation process. During a major incident, provide support and guidance to the Tech Lead and Communicator.
  
  Complete a Security RCA for every standard and major cyber incident.
• Security tooling, standard sand baselines: Help develop and regularly evaluate the Security Baseline for Northern Computer and all managed clients. Maintain efficient baseline auditing processes and security-product SOPs, complete semi-annual top-to-bottom security audits and remediate baseline issues,support security-tool deployments, and complete 60-day security check-ups following security projects.
• Security change coordination: Communicate security changes internally and collaborate with other departments to manage those changes effectively. Keep relevant documentation, calendars, and ticket notes currentin real time, and promptly communicate schedule conflicts or outstanding work.
• Internal Cybersecurity support: Provide input to the Client Solutions and Professional Service steams to ensure that security standards and the Security Baseline are upheld. Support client security meetings by providing cybersecurity reports when required.
• Cross-team collaboration: Work closely with the Service Deskand NOC, communicate issues and scheduling conflicts promptly, and collaborate with other departments during wider incidents and security changes.
• Automation and continuous improvement: Find and use efficient or automated methods for recurring work, automate alert resolution whenever practical, and proactively reduce, simplify, or eliminate end-user support requests.
• Additional company support: As requested by the Director of Central Services, assist the Service Desk, support internal IT operations, and participate in project-based security work. Provide after-hours and on-call support as scheduled.

• Experienced MSP NOC/SOC professional: 3+ years of experience working in aNOC, SOC, or closely related security operations role within a managed service provider environment, with demonstrated experience triaging alerts across multiple client environments, responding to incidents, documenting outcomes,and escalating effectively.
  • Tool awareness: Familiarity with EDR/AV, phishing simulators, basic SIEM concepts, and ticketing workflows(e.g., Connect Wise Manage/Automate).
  • Methodical triage: Comfort applying priority rules, confirming impact, and escalating on time—under pressure and in after‑hours…