Security Operations Center Analyst II

Exceed the expectations of our residential mortgage borrowers & business partners through superior service, simple processes, and effective communications.

We deliver on this mission by empowering our employees by encouraging and recognizing superior performance and innovative solutions, by promoting teamwork and divisional cooperation.
 

POSITION SUMMARY

Summary of the primary function of the position and its role.

The Security Operations Center Analyst II serves as a member of the Security Operations Center, responsible for monitoring, analyzing, and responding to security threats across the organization. This role supports the security posture of the business by triaging alerts, conducting in-depth investigations, and collaborating with internal teams and external teams. The analyst plays a key role in incident response activities, supports security monitoring infrastructure, and contributes to the continuous improvement of operational security processes and controls.

DESCRIPTION

Duties and Responsibilities

• Independently monitor, analyze, and respond to security events and alerts to detect potential threats, attacks, or policy violations across the enterprise.
• Act as Tier-2 support for escalated security incidents; perform triage, threat intelligence correlation, and provide recommendations for containment or remediation.
• Correlate and analyze data from multiple sources including SIEM, network flow, endpoint telemetry, threat intel feeds, and firewall logs to identify indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs).
• Maintain accurate and detailed documentation of investigation findings, response actions, and event timelines using security case management tools.
• Assist in threat hunting and proactive detection initiatives to identify stealthy or advanced threats across the environment.
• Support and help improve security policies, standards, procedures, and documentation aligned with best practices and regulatory requirements.
• Collaborate with IT, infrastructure, and development teams to validate findings, implement compensating controls, and improve detection use cases.
• Conduct ongoing research and analysis to stay current with the latest threat landscape, vulnerabilities, and defensive strategies.
• Contribute to SOC playbook development, tuning of detection rules, and enhancements to alerting fidelity.
• Participate in security-focused projects and cross-functional initiatives as a subject matter expert.

Qualifications and Education Requirements

• Associate or Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related field.
•  2-4 years of professional experience in a SOC, threat analysis, or information security operations role.
• Security certifications preferred (e.g., CompTIA Security+, CySA+, GSEC, GCIA, CEH, or similar).
• Systems, or related field; or equivalent work experience.

Skills, Abilities, and Knowledge

• Proficiency in analyzing logs from a variety of sources including SIEM, EDR, IDS/IPS, firewall, and proxy systems.
• Working knowledge of common security technologies such as firewalls, intrusion detection systems, endpoint protection, vulnerability scanners, and SIEM platforms (e.g., Splunk, Sentinel, Exabeam, etc.).
• Experience with threat intelligence platforms and familiarity with MITRE ATT&CK framework.
• Strong understanding of networking protocols, system administration (Windows/Linux), and security best practices.
• Ability to conduct root cause analysis, interpret malware behavior, and correlate disparate data points to form conclusions.
• Excellent written and verbal communication skills, with the ability to document technical findings for both technical and non-technical audiences.
• Demonstrated ability to work independently and as part of a collaborative team in a fast-paced, dynamic environment.
• Familiarity with ServiceNow (SNOW) for incident tracking, case management, and workflow coordination.

Ad