Tier 2 SOC Analyst

Dragonfli Group

Tier 2 SOC Analyst investigating and containing escalated SIEM and EDR threats for federal and Fortune 100 clients. Developing runbooks, managing vulnerabilities, and meeting overnight incident-response SLAs.

Posted 8/12/2026full-timeRemote • Virginia • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident investigation and response within a Security Operations Center (SOC) environment, with proficiency in SIEM and EDR tools, and a strong foundation in networking and operating systems. Capable of clear communication and disciplined documentation while adhering to strict service levels and workflows.

Highest-signal resume keywords

SIEM AlertingEDR Alert TriageIncident InvestigationSecurity+ CertificationScripting with Python

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident InvestigationResponse ManagementVulnerability TrackingNetworking FundamentalsOperating System Fundamentals

Soft Skills

Clear CommunicationDocumentation Habits

Tools & Technologies

Microsoft SentinelSplunkCrowdStrikeTenable

Certifications & Qualifications

Security+CySA+GCIHGSEC

Industry Keywords

SOC ExperienceManaged Security ServicesMulti-Tenant EnvironmentsIncident Lifecycle

Tech Stack

Tools & technologies

LinuxMacOSPythonSplunk

About the role

Key responsibilities & impact

Conduct deeper investigation of escalated SIEM and EDR alerts across client tenants
Investigate, contain within your authority, and escalate through the defined path with clear, documented handoffs
Develop and refine runbooks and standard operating procedures
Track and validate vulnerability findings using Tenable and route them into the correct workflow
Meet strict response and resolution service levels on every event and every shift
Open, update, and close tickets with accurate, auditable notes, and maintain clean shift logs
Communicate clearly with clients and the on-call lead during overnight events
Support monthly reporting with accurate event and response data

Requirements

What you’ll need

United States citizenship
Ability to pass a drug screening and a full background investigation, including verification of references, employment history, education, and certifications
3–5 years of SOC or security operations experience, including hands-on incident investigation and response
Demonstrated experience with SIEM alerting and EDR alert triage and containment
Solid networking and operating-system fundamentals across Windows, macOS, and Linux
Understanding of the incident lifecycle: detection, triage, containment, and escalation
Ability to work overnight shifts reliably on a rotation that includes weekends and holidays
Clear written communication and disciplined documentation habits
Experience with Microsoft Sentinel, Splunk, CrowdStrike or comparable EDR, and Tenable
Security+, CySA+, GCIH, GSEC, or a similar certification
Scripting for triage or automation using Python or PowerShell
Prior managed security services or multi-tenant SOC experience
Exposure to critical-infrastructure environments
Residency in the Hampton Roads through Richmond, VA corridor is preferred

Benefits

Comp & perks

Medical – Multiple POS health plan options including an HSA-compatible plan
Dental – PPO coverage for preventive, basic, and major services
Vision – Annual exam, frames, lenses, and contact lens allowance
401(k) – Employer match up to 5% of eligible compensation
Long-Term Disability – 100% employer-paid coverage at 50% of pre-disability earnings
Life Insurance & AD&D – 100% employer-paid coverage valued at $10,000 each
PTO – 15–25 days annually based on tenure
Paid Federal Holidays – All 11 federal holidays observed