SOC Analyst (Remote)

About the Opportunity

We're seeking a SOC Analyst to support a global technology organization that serves the property and casualty insurance industry.

Operating across 40+ countries and supporting hundreds of insurance clients worldwide, this organization maintains a complex enterprise environment and is committed to protecting critical business operations through advanced cybersecurity practices.

This is an excellent opportunity for a security professional who enjoys threat detection, incident response, cloud security, and security operations.

You'll play a key role in monitoring, investigating, and responding to security events across AWS cloud environments, endpoint security platforms, and enterprise SIEM solutions.

Responsibilities

• Monitor enterprise systems and networks for potential cybersecurity threats and suspicious activity.
• Investigate and respond to security incidents across cloud, endpoint, and enterprise environments.
• Analyze and remediate alerts generated from AWS security tools, SIEM platforms, endpoint detection solutions, and phishing reports.
• Conduct incident triage, root cause analysis, and escalation activities when necessary.
• Document investigations, findings, response actions, and remediation recommendations.
• Collaborate with security teams and key stakeholders to reduce organizational risk.
• Assist with improving incident response procedures and overall security operations practices.
• Support a fast-paced Security Operations Center (SOC) environment.

Required Qualifications

• Experience with incident detection, investigation, and response within enterprise environments.
• Hands-on experience responding to AWS Cloud security alerts.
• Experience monitoring and investigating SIEM-generated alerts.
• Strong experience with Endpoint Detection & Response (EDR) platforms, preferably CrowdStrike.
• Experience conducting phishing investigations and remediation activities.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication abilities.
• Ability to work independently and effectively within a remote team environment.

Preferred Qualifications

• Experience supporting organizations within the insurance, financial services, or highly regulated industries.
• Previous experience working in large-scale global enterprise environments.
• Familiarity with mature security operations and incident response programs.
• Knowledge of enterprise cybersecurity frameworks and best practices.

Why Apply?

• Fully remote work environment.
• Opportunity to work with modern cloud security, EDR, and SIEM technologies.
• Exposure to large-scale global security operations.
• Hands-on incident response and threat investigation experience.
• Potential for long-term opportunities based on performance.