SOC Incident Responder

Aspire Technology Partners

. Investigate, document, escalate, and resolve SOC security incidents and cases within established SLAs and operational procedures .

Posted 10/9/2026full-timeUnited StatesMid-LevelSenior💰 $115,000 - $127,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security Incident Response, utilizing advanced technical analysis and threat intelligence to investigate and resolve security incidents effectively. Proficient in managing incidents through established processes and tools, ensuring timely communication and documentation.

Highest-signal resume keywords

Security Incident ResponseSIEM Platform ExperienceThreat Intelligence UtilizationServiceNow Case ManagementNetworking and Security Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Advanced Technical AnalysisIncident ManagementEvent/Alert ManagementChange Management ProcessesSecurity Investigation TechnologiesMalware ContainmentIncident DocumentationEvidence CollectionOperational ImprovementsQuery Creation in SIEM

Soft Skills

Excellent Communication SkillsStrong Organizational SkillsDetail-Oriented ApproachAbility to Prioritize TasksAbility to Perform Under Pressure

Tools & Technologies

SIEM PlatformsEndpoint/XDR TechnologiesOSINT ToolsAI-Assisted Security ToolsMicrosoft OfficeServiceNow

Certifications & Qualifications

Security+CISSPGCIHECIHITIL

Industry Keywords

SOCNOCIncident ResponseThreat Actor TechniquesIndicators of CompromiseDefensive CountermeasuresCustomer EnvironmentsInvestigation ProceduresContainment ProcessesOperational Procedures

Tech Stack

Tools & technologies

CloudServiceNow

About the role

Key responsibilities & impact

Investigate, document, escalate, and resolve SOC security incidents and cases within established SLAs and operational procedures
Stay current with security vulnerabilities, threat actor techniques, attacks, indicators of compromise, and defensive countermeasures
Perform advanced technical analysis of security incidents and suspected compromise across customer environments
Create and run advanced queries in SIEM, endpoint/XDR, and other security platforms
Correlate endpoint, identity, email, network, cloud, and security telemetry to determine incident scope and impact
Use threat intelligence, OSINT, and AI-assisted tools to enrich investigations and accelerate incident response
Recommend and support containment, remediation, and recovery actions, including malware and account-compromise incidents
Open, track, update, and close incidents and cases in ServiceNow
Serve as an escalation point for SOC Level 1 and Level 2 analysts
Collaborate with SOC Incident Responders, SOC Engineering, DevOps, NOC Engineers, and other internal teams
Communicate incident status, recommended actions, and resolution to customers and affected stakeholders
Maintain investigation notes, evidence, timelines, findings, and resolution activities
Maintain customer technical information and incident-response documentation
Support development of detections, investigation procedures, runbooks, containment processes, and response workflows
Assess and recommend security solutions, integrations, and operational improvements
Prepare SOC and incident-response reports and communicate findings to customers, peers, team members, and management
Provide emergency on-call support on a rotating schedule
Perform other duties as assigned

Requirements

What you’ll need

Bachelor’s Degree
3-5 years of Security Incident Response and security experience
Knowledge and understanding of event/alert management, incident management, and change management processes
5+ years of experience working in a NOC or SOC (preferred)
5+ years of networking and/or security experience (preferred)
Experience with Security Management and SIEM platforms (e.g., Exabeam) (preferred)
Experience with endpoint/XDR, identity, email, network, and cloud security investigation technologies (preferred)
Experience utilizing OSINT, threat intelligence, and AI-assisted security investigation and analysis tools (preferred)
Experience with ticket and case management platforms (e.g., ServiceNow) (preferred)
Possession of industry certifications such as Security+, CISSP, GCIH, ECIH, ITIL, or similar (preferred)
Excellent interpersonal, written, and verbal communication skills
Ability to prioritize tasks and incidents based on risk, severity, customer impact, and operational requirements
Strong organizational and case-management skills
Ability to perform effectively during high-severity incidents and manage multiple investigations in a fast-paced environment
Familiarity with ITIL, incident management, and change management processes
Proficiency with Microsoft Office and ability to learn specialized security, investigation, and operational tools
Detail-oriented approach to investigation, evidence collection, documentation, and follow-through
Ability to occasionally work overtime
Ability to occasionally lift and/or move up to 35 pounds

Benefits

Comp & perks

Bonus eligibility
Technical or professional certifications applicable to the position or as directed
Rotating emergency on-call support opportunity
Limited to no travel