SOC Analyst 2 (Ref: 18540)

Position: SOC Analyst (Ref: 18540)
Location: Harrisburg, PA USA, 17101
Salary: $36.90/hr.
Duration: 11 Months 8 Days - Contract
Openings: 1
Deadline: 07/27/2026
Description:
***Local Candidates
***Location: Harrisburg, PA (100% Onsite)
***Interview Process: In-person interviews required

We are seeking an experienced SOC Analyst 2 to join our Security Operations Center team. In this role, you will perform event triage and internal escalations to protect critical information technology assets through prompt and accurate threat handling. You will play a key role in identifying and closing security gaps through detection engineering, threat hunting, intelligence gathering, and incident investigation to drive continuous monitoring improvements.

Key Responsibilities
• Monitoring & Triage: Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems. Log, capture, and respond to incoming events from email, chat, telecommunications, and security tools.
• Incident Investigation & Escalation: Conduct security investigations for alerts escalated within the SOC to determine full scope, potential root cause, and impact.
• Detection Engineering & Tuning: Conduct initial threat hunting to proactively identify anomalies and adversary activity. Tune and optimize existing detection rules, alerts, and correlation logic to reduce false positives and increase detection fidelity.
• Playbooks & Documentation: Follow, create, and refine established playbooks, SOPs, and incident reports in accordance with standard operating procedures.
• Incident Response & Analysis: Analyze advanced logs, network captures, and endpoint telemetry to identify malicious activity and Indicators of Compromise (IOCs). Provide hands-on incident response support and participate in root cause analysis / post-incident lessons learned sessions.
• Threat Intelligence: Monitor external threat sources for actionable intelligence and emerging security incidents.

Required Qualifications & Skills
• Technical Analysis: Hands-on experience analyzing complex logs, network traffic captures (PCAP), and endpoint telemetry.
• SIEM & Querying: Ability to create queries, reports, and scripts using modern security coding languages and SIEM query syntax.
• Threat Hunting & Tuning: Proven ability to conduct initial threat hunting and optimize detection rules/correlation logic.
• Process & Execution: Strong understanding of security playbooks, incident handling protocols, and troubleshooting tools.
• Communication & Collaboration: Excellent oral and written communication skills with the ability to work independently or as part of a high-functioning team.
• Schedule: Full-Time (40 hours/week)
• Must maintain flexibility for 24/7/365 shift rotations (days, nights, weekends, holidays)

Required / Desired Skills
• Create queries, reports and scripts leveraging current security coding and SIEM query languages Required - 3 Years
• Prioritize tasks effectively. Required - 3 Years
• Working knowledge of troubleshooting tools (software) Required - 3 Years
• Analyze and interpret various information Required - 3 Years