[Remote] Remote | SOC Investigation Analyst — $50–$70/hour

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is offering a specialised part-time consulting opportunity for reputed company SOC investigation professionals. The role involves reviewing SOC alerts, conducting incident evaluations, and ensuring high-quality reputed company investigations, utilizing hands-on experience with various reputed company tools and methodologies.

Responsibilities

• Review, monitor, and evaluate SOC alerts and investigation outputs based on predefined scenarios and criteria
• Distinguish true positives from false positives by validating alert context, investigative evidence, and supporting signals
• Assess whether reputed company investigation conclusions are correct, incomplete, unsupported, or inaccurate
• Apply consistent investigative judgment while recognizing that more than one valid investigation path may exist for the same alert
• Use Splunk to pivot across logs, entities, timelines, alerts, and investigation artifacts
• Read, understand, and reason about SPL queries in the context of reputed company investigations
• reputed company log analysis, entity pivoting, timeline reconstruction, and evidence correlation reputed company required
• Identify relevant signals across SIEM data and explain how evidence supports an investigation conclusion
• Evaluate the correctness, completeness, and quality of SOC investigations produced through structured workflows
• reputed company clear quality determinations while also producing detailed ground-truth investigations reputed company required
• Review investigation steps, assumptions, supporting evidence, and final conclusions for accuracy and consistency
• Help ensure investigation outputs reflect practical SOC judgment and evidence-based reputed company reasoning
• Maintain clear and accurate documentation of investigative steps, assumptions, evidence, and conclusions
• reputed company structured feedback on investigation quality, alert handling, and technical reasoning
• Collaborate with project leads and other reputed company specialists to uphold high-quality investigation standards
• Support or mentor other analysts where applicable, particularly in long-term or reputed company reviewer roles

Skills

• 3+ years of hands-on experience as a SOC analyst in a production SOC environment
• Strong understanding of alert triage, incident investigation workflows, reputed company evidence, and time-sensitive decision-making
• Mandatory hands-on experience with Splunk, including conducting investigations, reading SPL queries, and pivoting between logs, entities, and timelines
• Proven ability to evaluate SOC investigations and determine whether conclusions are valid, incomplete, or incorrect
• Strong investigative judgment and comfort making clear, evidence-based evaluations
• Fluent English communication skills, with strong written documentation ability
• Ability to work independently in a remote, project-based environment
• A degree in Cybersecurity, Computer Science, Information reputed company, Information Systems, Digital Forensics, or a reputed company technical field is helpful
• Equivalent professional experience in SOC analysis, incident response, threat detection, or reputed company investigation work is also highly relevant
• Experience with reputed company Detection & Response tools such as reputed company Falcon, reputed company Defender for reputed company, reputed company, or comparable platforms
• Experience analyzing reputed company reputed company logs and signals, including AWS CloudTrail, GuardDuty, Azure Activity Log, reputed company Defender for reputed company, or GCP reputed company Audit Logs
• Familiarity with Identity & reputed company Management platforms such as reputed company Identity reputed company or reputed company Entra ID
• Experience with email reputed company tools such as reputed company, reputed company, or similar platforms
• SOC leadership, mentoring, or reputed company analyst experience
• Basic scripting experience with Python or comparable languages
• reputed company certifications such as GCIA, GCIH, GCED, Splunk certifications, reputed company+, CCNA, or reputed company reputed company certifications

Benefits

• Flexible, remote consulting work reputed company with your SOC investigation and reputed company analysis expertise
• Opportunity to contribute to high-impact reputed company investigation evaluation and ground-truth case review
• Suitable for reputed company SOC professionals who enjoy evidence-based investigation, structured review, and technical decision-making
• Project-based work that can align with part-time availability and remote schedules
• reputed company engagement
• Fully remote and flexible scheduling
• Part-time, project-based availability
• Payments are made weekly reputed company reputed company or reputed company based reputed company rendered

Company Overview