SOC Analyst Tier 2

Vaultes

SOC Analyst II supporting cybersecurity operations for federal clients. Monitoring security events and responding to incidents in the Security Operations Center.

Posted 6/12/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SIEMEDRIDSIPSvulnerability managementincident responsethreat intelligencelog analysisendpoint securitynetwork security

Soft Skills

analytical skillswritten communicationverbal communicationincident triageteam coordinationattention to detailproblem-solvingtime managementshift turnover reportingdocumentation

Tools & Technologies

ticketing systemscase management systemscloud environmentsActive DirectoryWindowsLinuxnetworking fundamentalsdetection rulesplaybooksoperational notes

Certifications & Qualifications

Public Trust

Industry Keywords

cybersecuritySOCNISTFISMARMFcompliance-driven environmentsfederal regulationssecurity operationsincident handlingattack techniques

Tech Stack

Tools & technologies

CloudCyber SecurityLinux

About the role

Key responsibilities & impact

Monitor SIEM, EDR, IDS/IPS, email security, vulnerability, and other security platforms for suspicious activity.
Triage alerts and distinguish false positives from actionable security events.
Investigate security events using log data, endpoint telemetry, network data, and threat intelligence.
Escalate incidents in accordance with severity, impact, and response procedures.
Document investigations, findings, and actions taken in ticketing/case management systems.
Support incident handling activities including containment, evidence collection, and coordination with technical teams.
Review vulnerability findings and assist with prioritization and routing to responsible teams.
Participate in shift turnover reporting and maintain accurate operational notes.
Support development and refinement of detection rules, playbooks, and standard operating procedures.
Contribute to metrics reporting such as alert volumes, escalation rates, false positives, and response timelines.

Requirements

What you’ll need

Ability to obtain and maintain a Public Trust
US Citizenship is required
Bachelor’s degree in cybersecurity, information systems, computer science, or related field; equivalent experience may be substituted.
3–5 years of experience in a SOC, cybersecurity operations, or related IT security role.
Experience working with SIEM platforms, ticketing systems, and endpoint/network security tools.
Understanding of common attack techniques, indicators of compromise, and incident triage workflows.
Familiarity with Windows, Linux, Active Directory, cloud environments, and networking fundamentals.
Familiarity with NIST, FISMA, RMF, or similar frameworks.
Experience supporting federal, regulated, or compliance-driven environments.
Strong analytical, written, and verbal communication skills.
Comfortable working across shifts and during time-sensitive events.

Benefits

Comp & perks

Paid time off
Paid holidays
Work-from-home opportunities
401k with matching incentive
Competitive Medical/dental/vision benefits
Company provided life insurance
Company provided short-term disability