SOC Analyst - Endpoint Detection & Response

About the position Seeking an SOC Analyst that possesses strong expertise in Endpoint Detection and Response (EDR) tools and cyber-security incident handling. The resource will be expected to provide security monitoring and response efforts for, and in coordination with the SOC. This is a remote position.

Responsibilities

• Monitor, analyze, and respond to cyber-security events, alerts, and incidents affecting State of Iowa IT systems.
• Take appropriate actions to protect IT assets from potential incidents and threats.
• Document and report changes, trends, and implications related to evolving cyber-security tools, systems, and solutions.
• Follow SOC processes and assist ISD Security Engineers and OCIO support teams during alerts, events, and incidents.
• Submit new events and update existing events within the SOC ticketing system.
• Provide phone and email support to state agencies and participating partners during alerts, events, and incidents.
• Provide off‑hours or ad‑hoc shift support as required.
• Support Tier 1 SOC Analysts in triaging cyber-security events, alerts, and incidents.
• Follow detailed operational procedures to analyze, escalate, and support remediation of critical security incidents.
• Assist with SOC metrics, reporting, and communications.
• Support incident response activities up to the preliminary forensics stage.
• Monitor EDR tools and perform initial assessment and data gathering for alerts.

Requirements

• Strong communication, reporting, and documentation abilities.
• Proven ability to collaborate effectively with partners across varying technical backgrounds.
• Capability to perform Tier 1 troubleshooting, including log collection, documentation review, and appropriate escalation.
• Maintain up‑to‑date knowledge on relevant cyber-security technologies and tools.
• Hands on experience working with Endpoint Detection and Response (EDR) tools (3 years)
• Experience responding to cyber security events and incidents (3 years)
• Experience working with Crowdstrike, or comparable EDR tool (3 years)
• Ability to work in high pressure, fast paced environments (3 years)

Benefits

• Paid Sick Time
• Insurance for Medical, Dental, Vision and Life Available
• 401(k) including Employer Match
• HSA, Short-term & Long-term Disability Available Apply To this Job