Weekend SOC Analyst; Remote | Part-Time

Summary
We are looking for an experienced Senior SOC Analyst to join our Security Operations Center
(SOC) on a part-time/freelance basis to provide weekend operational coverage.
This role is ideal for an experienced cybersecurity professional seeking flexible weekend work
while remaining engaged in real-world security operations across multiple client environments.
As part of our Managed Security Services (MSSP) team, you will monitor security events,
investigate alerts, respond to incidents, and ensure continuous protection for our customers
during weekend shifts. You will work alongside our global SOC team, following established
procedures while contributing your expertise to incident investigations and operational
improvements.
Working Schedule
– Part-time / Freelance
– Weekend coverage (Saturday and Sunday)
– Half-day shifts (approximately 4–6 hours per day)
– Remote position
Responsibilities
– Monitor, investigate, and respond to security alerts and incidents across multiple client
environments.
– Perform incident triage, analysis, containment, remediation, and escalation when
required.
– Handle SOC tickets and customer requests during assigned weekend shifts.
– Conduct proactive threat hunting using SIEM, EDR, network, and endpoint telemetry
when operational workload allows.
– Analyze logs and security telemetry using Elastic Stack and related technologies.
– Investigate suspicious activity across Windows, Linux, cloud, and network environments.
– Maintain awareness of ongoing investigations and provide proper handover notes to
weekday SOC analysts.
– Monitor the health of SIEM, EDR, log pipelines, and security monitoring infrastructure.
– Collaborate with the SOC team during active security incidents.
– Prepare incident reports, investigation findings, and customer-facing updates.
– Identify opportunities to improve detection logic, SOC workflows, and operational
processes.
– Stay current with emerging threats, attacker techniques, and cybersecurity trends.
Core Skills Required
– Strong hands-on experience working in a SOC, MDR, or Incident Response environment.
– Deep understanding of modern cyber-attacks, attacker methodologies, and intrusion
techniques.
– Strong incident response and investigation experience.

– Experience with SIEM platforms, particularly Elastic Stack (Elasticsearch, Logstash,
Kibana).
– Knowledge of EDR/XDR technologies and security monitoring architecture.
– Strong knowledge of networking concepts, protocols, and traffic analysis.

– Experience with IDS/IPS technologies and detection engineering.
– Good Linux administration and troubleshooting skills.
– Ability to automate operational tasks using Python, Bash, or Power Shell.
– Experience creating detection rules and threat hunting queries.
– Understanding of the MITRE ATT&CK framework.
– Knowledge of Windows, Linux, Active Directory, cloud, and network security.
– Strong analytical and problem-solving skills.
– Ability to work independently with minimal supervision.
– Excellent communication and documentation skills.
– Comfortable working in a fast-paced MSSP environment supporting multiple customers.
We Value People Who
– Take ownership of incidents from investigation through resolution.
– Are naturally curious and investigative.
– Can work independently and make sound technical decisions.
– Stay calm and methodical during active security incidents.
– Communicate clearly during shift handovers.
– Continuously seek ways to improve security operations.
– Enjoy working in a collaborative, distributed SOC environment.
– Value flexibility and reliability, especially during scheduled weekend coverage.
Requirements
– 3+ years of experience in a SOC, MDR, Incident Response, or similar cybersecurity role.

– Experience with Elastic Stack (ELK).

– Experience with SIEM, EDR,…