SOC Analyst (Tier 1/2) - US-Based | SIEM & EDR Monitoring for Government & Healthcare Clients
Cybrty Inc is a woman-owned, minority-owned cybersecurity and IT firm based in New Jersey. We deliver managed security to government agencies, healthcare organizations, and regional businesses across the U.S.
We are building a vetted bench of SOC analysts ahead of contracts currently in our pipeline. This is not a job with guaranteed hours today — it is a chance to get pre-qualified so that when an award lands, we call you first and you start billing quickly.
WHAT YOU'D DO
- Triage alerts from EDR/XDR and SIEM platforms (Microsoft Sentinel, Splunk, CrowdStrike, Huntress, or similar)
- Investigate and escalate true positives; document and close false positives
- Write clear incident notes a non-technical client can read
- Support after-hours and weekend coverage rotations when a contract requires it
WHAT WE NEED FROM YOU
- 2+ years hands-on in a SOC or MSSP environment
- Working knowledge of at least one major SIEM and one major EDR platform
- Comfortable with MITRE ATT&CK as a working framework, not just a buzzword
- Clean, plain-English writing — our clients read your notes
- Willing to complete a client background check on engagement
NICE TO HAVE
- Security+, CySA+, GCIH, or GSEC
- Experience in CJIS, HIPAA, or CMMC-regulated environments
- Prior work under a government contract
ELIGIBILITY (REQUIRED)
Must be a U.S. Person as defined under ITAR (22 CFR 120.62) — U.S. citizen or lawful permanent resident — residing in the United States. This is a requirement flowed down from our government and healthcare client contracts, not a preference. Please confirm in your proposal; we verify at onboarding, not through this platform.
HOW WE WORK
Hourly, project-based, as needed. We tell you the truth about pipeline timing. If we don't have work for you this month, we'll say so rather than string you along. Analysts who perform well move to first-call status and, where a contract supports it, to a longer-term arrangement.
IN YOUR PROPOSAL, PLEASE ANSWER
1. Which SIEM and EDR platforms have you personally worked in, and roughly how many months in each?
2. Walk me through one alert you investigated that turned out to be a real incident. What tipped you off, and what did you do?
3. Are you a U.S. citizen or lawful permanent resident currently residing in the U.S.?
4. What is your availability for after-hours or weekend on-call rotations?
5. What is your target hourly rate for ongoing SOC work?
Proposals that do not answer these will not be reviewed.
