04. Senior SOC Analyst with Cisco Experience | Fully Remote | USD Payments

Voxidea is seeking an experienced and highly motivated SOC Analyst to join our IT and Security Operations team. This role is responsible for monitoring, triaging, investigating, and responding to security events across endpoints, identity, cloud, network, and other enterprise systems.

The SOC Analyst will work closely with our Managed Security Service Provider (MSSP) and internal IT team to validate alerts, investigate potential threats, coordinate containment and remediation, drive ticket resolution, and continuously improve our security controls, policies, and operational processes.

This is an operator-level role requiring hands-on experience in a mature security environment. The ideal candidate can independently investigate security events, work across multiple security technologies, identify recurring risks and alert noise, recommend improvements, and clearly communicate findings to IT leadership.

Key Responsibilities

• Triage, investigate, and respond to security alerts from MSSPs, SIEMs, XDR/EDR platforms, firewalls, identity systems, and other security tooling.
• Work directly with the MSSP to validate alerts, investigate escalations, request and review evidence, and coordinate appropriate response actions.
• Perform hands-on investigation using technologies such as SentinelOne, Microsoft Defender, Microsoft 365, SIEM platforms, and Cisco security/networking technologies.
• Validate detections quickly and accurately by determining:
• False positive vs. true positive
• Scope and severity of impact
• Affected users, endpoints, systems, and accounts
• Indicators of compromise
• Required containment and remediation actions
• Own security tickets end-to-end, including categorization, prioritization, investigation, escalation, documentation, remediation, and closure.
• Coordinate containment actions with IT, including endpoint isolation, account/session actions, blocking indicators, access changes, and other remediation measures.
• Investigate suspicious authentication, mailbox, endpoint, network, and cloud activity.
• Correlate information across multiple security platforms to establish an accurate incident timeline and determine root cause.
• Monitor and analyze trends in alerts and incidents and identify opportunities to reduce recurring security noise.
• Recommend and implement security control, configuration, and policy improvements based on observed threats and operational trends.
• Participate in tuning detection rules, security policies, access controls, endpoint configurations, and other security controls.
• Maintain and improve SOC playbooks, incident-response procedures, and security documentation.
• Support security incident response, evidence collection, and preservation procedures when required.
• Produce weekly and monthly security reporting for the IT Director, including:
• Incident summaries
• Alert volume and categories
• Response and resolution times
• Significant security events
• Recurring alert trends
• Control gaps
• Recommended improvements
• Support continuous improvement initiatives involving endpoint telemetry, monitoring, detection, response, and security operations.