SOC Analyst

About the role

The SOC Analyst on the Cyber Defense Operations team protects BeyondTrust’s enterprise infrastructure and product integrity by monitoring, investigating and responding to security events, building detection content, and integrating AI‑driven tools into daily workflows.

About the company

BeyondTrust is a global identity security leader offering a cybersecurity SaaS portfolio focused on privileged access management, protecting the identity attack surface for over 20,000 customers including 75 Fortune 100 companies.

Requirements

• 2+ years experience in a SOC, security operations, or incident response role
• Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior
• Experience with at least one SIEM platform and ability to write search/detection queries
• Familiarity with EDR platforms and cloud environments (IaaS preferred)
• Comfortable using AI systems (LLM assistants, copilots, AI‑driven analysis tools) in security workflows
• Strong written communication skills for clear documentation to technical and non‑technical audiences
• Experience leading or co‑leading complex incident response engagements
• Experience with identity and access management platforms and cloud security posture management tools
• Scripting/automation skills (Python, PowerShell, etc.) applied to security workflows
• Familiarity with SOAR platforms or orchestration tools for automated response and enrichment
• Experience designing or implementing AI agent architectures, LLM‑based automation pipelines, or prompt engineering for security use cases
• Experience building or contributing to threat intelligence programs or detection‑as‑code pipelines
• Understanding of the privileged access management landscape and its threat actors
• Track record of evaluating and adopting emerging technologies in a production security environment