SOC Analyst in Harrisburg, Pennsylvania at INFO ORIGIN INC

Location: Harrisburg, PA
Job Type: Long-Term Contract
Work Arrangement: Onsite
Interview: In-Person Only
Schedule: 24/7/365 Shift Rotation

We are looking for an experienced SOC Analyst 2 to join our Security Operations Center (SOC) team in Harrisburg, PA. The ideal candidate will have strong experience in security monitoring, incident investigation, SIEM, threat hunting, detection engineering, and incident response.

You will be responsible for monitoring security events, investigating alerts, identifying indicators of compromise, improving detection rules, and supporting incident response activities to protect critical IT systems and networks.

• Monitor information security and network events and proactively respond to potential threats.
• Perform alert triage, investigation, and internal SOC escalations.
• Analyze logs, network captures, and endpoint telemetry to identify malicious activity and IOCs.
• Investigate security alerts to determine scope, root cause, and potential impact.
• Conduct initial threat hunting to identify suspicious activity and security anomalies.
• Create, follow, and improve SOC playbooks and standard operating procedures.
• Tune and optimize detection rules, alerts, and correlation logic to reduce false positives.
• Document security incidents, investigations, and response activities accurately.
• Monitor external threat intelligence sources for actionable security events.
• Provide incident response support during security and network incidents.
• Participate in root cause analysis and lessons-learned activities.
• Create queries, reports, and scripts using SIEM query languages and security tools.
• Work effectively both independently and as part of a SOC team.
• Support a 24/7/365 security operations environment, including nights, weekends, and holidays.

• Experience working in a Security Operations Center (SOC) environment.
• Strong knowledge of SIEM, security monitoring, and alert triage.
• Experience with threat hunting and incident investigation.
• Ability to analyze security logs, network traffic/captures, and endpoint telemetry.
• Knowledge of IOCs, malicious activity, and common security threats.
• Experience tuning detection rules and reducing false positives.
• Strong troubleshooting and analytical skills.
• Ability to create queries, reports, and scripts using security/SIEM query languages.
• Excellent written and verbal communication skills.
• Ability to prioritize tasks and make timely security decisions.

• 100% Onsite – Harrisburg, PA
• In-person interview required
• Long-term contract opportunity
• Must be flexible to work rotating days, nights, weekends, and holidays as part of a 24/7/365 SOC operation.