Mercor is hiring

SOC Analyst II

professionals on behalf of high-growth technology and enterprise partners to strengthen their

security operations and incident response capabilities

. This role is ideal for experienced SOC analysts who can independently investigate, respond to, and remediate security incidents across cloud, endpoint, and network environments.

• * *

## Responsibilities - Monitor, triage, and investigate security alerts from

SIEM, EDR/XDR, IDS/IPS, and cloud security tools

, distinguishing real threats from false positives. - Perform

in-depth incident investigations

, including log analysis, endpoint inspection, network traffic analysis, and timeline reconstruction. - Lead response actions for confirmed incidents, including

containment, remediation, and recovery

, following established incident response playbooks. - Conduct

threat hunting

activities to proactively identify adversarial behavior not detected by automated tools. - Tune detection rules, alerts, and dashboards to improve signal quality and reduce alert fatigue. - Collaborate with security engineering, IT, and cloud teams to remediate vulnerabilities and improve overall security posture. - Maintain accurate incident documentation, reports, and post-incident reviews. - Mentor and support

Tier 1 SOC analysts

, providing guidance on investigations and response techniques.

• * *

## Requirements - 2–4+ years of experience in a

Security Operations Center (SOC)

or incident response role. - Strong understanding of

networking fundamentals

(TCP/IP, DNS, HTTP/S) and common attack vectors. - Hands-on experience with

SIEM platforms

(e.g., Splunk, Sentinel, QRadar) and

EDR/XDR tools

(e.g., CrowdStrike, SentinelOne). - Proficiency in analysing

Linux and Windows

logs and system activity. - Experience with

cloud security monitoring

in AWS, GCP, or Azure environments. - Familiarity with

MITRE ATTACK

, threat actor tactics, techniques, and procedures (TTPs). - Basic scripting or automation skills (Python, Bash, or PowerShell) preferred. - Strong written and verbal communication skills for incident reporting and cross-team collaboration.

• * *

## Why Join - Work with leading companies strengthening their

security operations and cyber defense

capabilities. - Take ownership of

end-to-end incident investigations

and response actions. - Collaborate with experienced security engineers, threat hunters, and cloud teams. - Gain exposure to modern

cloud, endpoint, and detection engineering

environments. - Join a global network of vetted security professionals through Mercor.