Arctiq Logo

Arctiq

SOC Analyst

Posted 11 Days Ago
In-Office or Remote
Hiring Remotely in Nashville, TN
Junior
In-Office or Remote
Hiring Remotely in Nashville, TN
Junior
Monitor and triage security alerts across SIEM, EDR/XDR, identity, email, network, and cloud environments. Investigate suspicious activity, execute response playbooks, document cases, meet SLAs, and collaborate with clients, engineering, and detection teams. The role includes continuous SOC improvement, shift work, weekends, holidays, and occasional on-call escalations.
The summary above was generated by AI

Company Overview:
Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

Position Overview:

We are hiring multiple SOC Analysts at the Tier 1 and Tier 2 levels to staff our Day, Swing, and Night shifts. You will be a frontline defender for a diverse portfolio of clients — monitoring detections, triaging alerts, leading investigations, executing response playbooks, and continuously improving the way we detect and respond to threats.

This role is ideal for analytical, curious, and resilient practitioners who enjoy fast-paced work, want exposure to a broad range of environments and technologies, and care deeply about protecting customers.  


Responsibilities:

  • Continuously monitor and triage alerts and detections across SIEM, EDR/XDR, identity, email, network, and cloud telemetry for our managed client base, applying severity classification and initial enrichment on every event you touch.
  • Investigate suspicious activity end-to-end — from validation and pivoting through to root-cause analysis — using knowledge of attacker tradecraft, the MITRE ATT&CK framework, and the cyber kill chain to reach confident, well-supported conclusions.
  • Execute documented response playbooks to contain threats, including isolating hosts, disabling compromised accounts, blocking indicators, resetting credentials, and coordinating handoffs with client and engineering teams.
  • Partner with Detection Engineering to reduce noise and false positives, and to propose, test, and deploy new analytics, automations, and SOAR playbooks that make the SOC faster and more accurate.
  • Maintain audit-grade documentation throughout every case, capturing notes, timelines, and customer-facing communications cleanly in the ticketing and case-management system.
  • Consistently meet triage, investigation, and notification SLAs while sustaining high accuracy, low false-positive rates, and strong client satisfaction across the portfolio.
  • Drive continuous improvement of the SOC by feeding lessons learned back into detections, playbooks, runbooks, and knowledge-base articles in partnership with SOC Leadership and Detection Engineering.
  • Operate on an assigned shift (Day, Swing, or Night) within a 24x7 rotation — including weekends and holidays as scheduled — and respond to on-call escalations when required.

Qualifications:

  • One or more years in an IT security role or IT support role with significant security responsibilities.
  • Working knowledge of core security concepts: TCP/IP, common protocols, Windows and Linux fundamentals, Active Directory / Entra ID, cloud (Azure / AWS / GCP) basics, and common attacker techniques.
  • Familiarity with at least one SIEM and one EDR/XDR platform; comfortable writing or modifying basic queries (KQL, SPL, or similar).
  • Demonstrated ability in effective communication and collaborating in a diverse high-performance team environment a strong commitment to customer service.
  • Individuals will be required to submit to a background examination.  

Location:

Remote candidates across North America will be considered, with preference given to candidates in or near one of our hub locations:

  • Nashville, Tennessee, USA
  • Duluth, Georgia, USA

Candidates must be legally authorized to work in the country where they reside. Arctiq does not sponsor work Visas at this time.

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

 

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.

Similar Jobs

13 Days Ago
Remote
United States
70K-80K Annually
Mid level
70K-80K Annually
Mid level
Information Technology • Software • Cybersecurity • Defense
Leads complex security investigations from detection through resolution, including threat analysis, containment, eradication, recovery, root cause analysis, threat hunting, vulnerability management, and attack-chain reconstruction. Develops incident response playbooks and SOPs, writes executive reports, mentors Tier I analysts, and participates in on-call coverage. Requires advanced Windows, networking, scripting, malware analysis, SIEM, digital forensics, and incident response capabilities.
Top Skills: AzureBatchCyber Kill ChainCyberchefDnsElastic StackEntra IdExplorer SuiteGhidraHTTPIdaKusto Query LanguageMicrosoft Defender XdrMicrosoft SentinelMitre Att&CkPowershellPythonSift WorkstationSplunkSqliteSsl/TlsSysinternals SuiteTcp/IpVelociraptorVolatilityWiresharkX64Dbg
13 Days Ago
Remote
United States
104K-166K Annually
Senior level
104K-166K Annually
Senior level
Aerospace • Information Technology • Security • Cybersecurity • Defense
Monitor and investigate security alerts, conduct threat hunting, analyze network and log data, perform forensic investigations, and develop SPL queries using SIEM and EDR tools. The role supports incident response, security monitoring improvements, SOC process development, risk mitigation, reporting, and mentoring junior analysts. It requires flexibility across all shifts and collaboration with government and cybersecurity teams in a remote federal environment.
Top Skills: EdrLinuxMicrosoft SentinelMitre Att&CkNist Sp 800-53RmfSIEMSplSplunkTcp/IpUdpWeb Application Firewall (Waf)Windows
13 Days Ago
Remote
United States
80K-128K Annually
Senior level
80K-128K Annually
Senior level
Aerospace • Information Technology • Security • Cybersecurity • Defense
Monitors and investigates security alerts, performs threat hunting, analyzes logs and network traffic, and conducts incident and forensic analysis. The analyst uses SIEM and EDR tools, develops Splunk queries, identifies attack techniques, improves SOC monitoring and procedures, advises management on risks, prepares incident reports, and mentors junior analysts. The role supports federal systems and requires flexibility across all shifts.
Top Skills: EdrLinuxMicrosoft SentinelMitre Att&CkNist Sp 800-53Regular ExpressionsRmfSecurity+ CeSIEMSplSplunkTcp/IpUdpWafWindows

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account