SOC Analyst 2

Mercor is hiring SOC Analyst II professionals on behalf of high-growth technology and enterprise partners to strengthen their security operations and incident response capabilities. This role is ideal for experienced SOC analysts who can independently investigate, respond to, and remediate security incidents across cloud, endpoint, and network environments.

Responsibilities

• Monitor, triage, and investigate security alerts from SIEM, EDR/XDR, IDS/IPS, and cloud security tools, distinguishing real threats from false positives.

• Perform in-depth incident investigations, including log analysis, endpoint inspection, network traffic analysis, and timeline reconstruction.

• Lead response actions for confirmed incidents, including containment, remediation, and recovery, following established incident response playbooks.

• Conduct threat hunting activities to proactively identify adversarial behavior not detected by automated tools.

• Tune detection rules, alerts, and dashboards to improve signal quality and reduce alert fatigue.

• Collaborate with security engineering, IT, and cloud teams to remediate vulnerabilities and improve overall security posture.

• Maintain accurate incident documentation, reports, and post-incident reviews.

• Mentor and support Tier 1 SOC analysts, providing guidance on investigations and response techniques.

Requirements

• 2–4+ years of experience in a Security Operations Center (SOC) or incident response role.

• Strong understanding of networking fundamentals (TCP/IP, DNS, HTTP/S) and common attack vectors.

• Hands-on experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar) and EDR/XDR tools (e.g., CrowdStrike, SentinelOne).

• Proficiency in analysing Linux and Windows logs and system activity.

• Experience with cloud security monitoring in AWS, GCP, or Azure environments.

• Familiarity with MITRE ATTACK, threat actor tactics, techniques, and procedures (TTPs).

• Basic scripting or automation skills (Python, Bash, or PowerShell) preferred.

• Strong written and verbal communication skills for incident reporting and cross-team collaboration.

Why Join

• Work with leading companies strengthening their security operations and cyber defense capabilities.

• Take ownership of end-to-end incident investigations and response actions.

• Collaborate with experienced security engineers, threat hunters, and cloud teams.

• Gain exposure to modern cloud, endpoint, and detection engineering environments.

• Join a global network of vetted security professionals through Mercor.

We consider all qualified applicants without regard to legally protected characteristics and provide reasonable accommodations upon request.

Contract and Payment Terms

• You will be engaged as an independent contractor.
• This is a fully remote role that can be completed on your own schedule.
• Projects can be extended, shortened, or concluded early depending on needs and performance.
• Your work at Mercor will not involve access to confidential or proprietary information from any employer, client, or institution.
• Payments are weekly on Stripe or Wise based on services rendered.
• Please note: We are unable to support H1-B or STEM OPT candidates at this time.

About Mercor

Mercor partners with leading AI labs and enterprises to train frontier models using human expertise. You will work on projects that focus on training and enhancing AI systems. You will be paid competitively, collaborate with leading researchers, and help shape the next generation of AI systems in your area of expertise.