ECCO Select is a talent acquisition and consulting company specializing in people, process and technology solutions. We provide the talent behind the technology enabling our clients to achieve their goals. For more information about ECCO Select, visit us at www.eccoselect.com.

Position Title:   Senior Security Operations Center (SOC) Analyst – 2nd Shift (3pm-11pm CST)

Location Information 

Remote | 2nd Shift (3pm-11pm CST)

Position Responsibilities:

We are seeking a Senior SOC Analyst to join our security operations team on the 2nd shift. In this hands-on role, you will be responsible for detecting, investigating, and helping mitigate security incidents while driving operational excellence across the SOC. You'll have a unique opportunity to proactively defend against cyber threats by collaborating within the security team, enhancing monitoring capabilities, conducting in-depth threat hunts, eliminating inefficiencies, and continuously improving detection and response processes.

Key responsibilities include:

• Driving Operations: Resolve workflow inefficiencies, streamline processes for analysts, expand and refine detection coverage, and continuously tune controls to reduce false positives and improve SOC performance.
• Threat-Informed Defense & Detection Engineering: Leverage internal and external threat intelligence and adversary research to enhance defensive measures. Develop and optimize SOC platforms (SIEM/SOAR, EDR, NDR, log analytics) for improved detection quality and reduced noise. Engineer, test, and deploy new detection logic, behavioral analytics, and alerting mechanisms, with a focus on ATT&CK-aligned use cases.
• SOC Operations Maturity & Continuous Improvement: Collaborate with SOC leadership to sharpen operational focus, identify and implement skill requirements, refine responsibilities, and set measurable targets. Translate observed detection gaps into actionable improvements through technology enhancements, automation, or improved processes.
• Threat Hunting: Perform proactive, intelligence-driven threat hunts to detect malicious activity or suspicious behaviors not uncovered by standard monitoring. Document findings and work with leadership and partner teams to ensure thorough remediation. Continuously innovate and adapt hunting methodologies in response to emerging threats.
• Incident Response & Security Event Handling: Support incident and event identification, analysis, and resolution both independently and as part of a cross-functional team. Participate in after-hours incident response if required, ensuring timely and effective remediation and recovery from security incidents.

Your work will directly contribute to elevating our overall security posture, making the SOC more responsive and resilient to both known and emerging threats.

Essential Skills, Experience

• Minimum 3–5 years of experience within an operational security environment (SOC, detection engineering, threat hunting, or cyber threat intelligence).
• Strong hands-on experience in incident response, security monitoring, detection engineering, or operations roles.
• Advanced knowledge of SIEM, SOAR, EDR, NDR, and log analytics platforms with expertise in tuning, detection logic development, and behavioral analytics.
• Demonstrated ability to conduct hypothesis-driven and intelligence-driven threat hunts using both internal telemetry and external threat intelligence.
• Solid understanding of the MITRE ATT&CK framework, with proven ability to develop and deploy ATT&CK-aligned analytics/use cases.
• Experience working collaboratively across InfoSec teams and multiple business units to implement both preventive and detective control improvements.
• Process-oriented mindset with a focus on identifying, prioritizing, and eliminating operational inefficiencies or detection gaps.
• Effective at documenting investigations, findings, and recommendations for both technical and non-technical stakeholders.
• Capacity to operate autonomously as well as part of a team, including managing time-sensitive incidents and participating in after-hours response when necessary.
• Excellent problem-solving, critical thinking, and communication skills. Ability to translate security risks and complex technical information into risk-managed, business-aligned solutions.

Qualifications:

• Bachelor’s degree in computer science, information security, or equivalent professional experience and/or certifications.
• Relevant certifications (such as GCIA, GCIH, GCFA, CISSP, or similar) are strongly preferred but not required.
• Experience balancing robust security controls with business operational needs.

ECCO Select is committed to hiring and retaining a diverse workforce. Our policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Veterans of our United States Uniformed Services are specifically encouraged to apply for ECCO Select opportunities.

Equal Employment Opportunity is The Law
This Organization Participates in E-Verify