ZipRecruiter

Log In

1

Director Soc 2 Analyst Jobs (NOW HIRING)

ECS

SOC Tier 2 Analyst

Portland, OR · On-site

The SOC Analyst 2 supports the organization's security operations by conducting deeper investigation of escalated alerts, correlating security telemetry, supporting incident response activities, and ...

ECS

SOC Tier 2 Analyst

Portland, OR · On-site

They are seeking a SOC Tier 2 Analyst to support security operations by investigating escalated alerts, coordinating incident responses, and improving detection processes. Responsibilities : • ...

Marvell

Director, SOC Design

Santa Clara, CA

... analysis, synthesis and timing signoff through reviews and design changes * Work with the ... Highlights include an employee stock purchase plan with a 2-year look back, family support programs ...

Marvell

Director, SOC Design

Westborough, MA

... analysis, synthesis and timing signoff through reviews and design changes * Work with the ... Highlights include an employee stock purchase plan with a 2-year look back, family support programs ...

Aretec Inc

Tier 2 Analyst

Washington, DC · On-site

With a strong foundation in SOC operations and incident response, you bring analytical thinking ... We are seeking a Tier 2 Analyst to support enterprise SOC operations by reviewing and responding to ...

Home - ARETEC

Tier 2 Analyst

Washington, DC · Remote

With a strong foundation in SOC operations and incident response, you bring analytical thinking ... We are seeking a Tier 2 Analyst to support enterprise SOC operations by reviewing and responding to ...

Intel

Director, SoC Design Engineering

Austin, TX · On-site

$134K - $164K/yr

Job Details: The Role and Impact We are seeking a highly experienced a Director, SoC Design ... analytical, debugging, and technical leadership abilities, with a passion for driving innovation ...

Intel

Director, SoC Design Engineering

Santa Clara, CA · On-site

$159K - $195K/yr

Job Details: The Role and Impact We are seeking a highly experienced a Director, SoC Design ... analytical, debugging, and technical leadership abilities, with a passion for driving innovation ...

Intel

Director, SoC Design Engineering

Hillsboro, OR · On-site

$148K - $180K/yr

Job Details: The Role and Impact We are seeking a highly experienced a Director, SoC Design ... analytical, debugging, and technical leadership abilities, with a passion for driving innovation ...

TestPros

SOC 2 Assessor (Part time & Remote)

Sterling, VA · On-site +1

$50 - $90/hr

TestPros is looking for Expert level SOC 2 Auditors with experience performing SOC 2 Type 2 ... Conduct Gap analysis and readiness assessments to identify and document gaps in the organization ...

Constellis

SOC Director

Cambridge, MA

Direct SOC operators and intelligence analysts in effective intelligence collection, analysis, and reporting. * Provide intelligence support that maximizes the capabilities, synergies, and ...

New

Constellis

SOC Director

Boston, MA · On-site

Direct SOC operators and intelligence analysts in effective intelligence collection, analysis, and reporting. * Provide intelligence support that maximizes the capabilities, synergies, and ...

New

InterSources

SOC Analyst III

Chandler, AZ · On-site

The Tier 3 SOC Analyst serves as an escalation point for Tier 1 and Tier 2 Analysts within the SOC and provides advanced analytical and investigation support for complex incidents to assist in ...

InterSources

SOC Analyst III

Auburn Hills, MI

The Tier 3 SOC Analyst serves as an escalation point for Tier 1 and Tier 2 Analysts within the SOC and provides advanced analytical and investigation support for complex incidents to assist in ...

next page

Showing results 1-20

All JobsSoc 2 Analyst JobsDirector Soc 2 Analyst Jobs

Director Soc 2 Analyst information

What is a Director SOC 2 Analyst?

A Director SOC 2 Analyst is a senior professional responsible for overseeing an organization's compliance with SOC 2 standards, which are designed to ensure the security, availability, processing integrity, confidentiality, and privacy of customer data. This role typically involves managing SOC 2 audits, implementing effective controls, and leading teams to maintain ongoing compliance. The director works closely with both internal stakeholders and external auditors to identify risks, address gaps, and ensure best practices are followed throughout the organization. They play a crucial role in building trust with clients and partners by demonstrating a strong commitment to data security and regulatory requirements.

What are the key skills and qualifications needed to thrive as a Director SOC 2 Analyst, and why are they important?

To thrive as a Director SOC 2 Analyst, you need deep expertise in IT auditing, risk management, and compliance, typically supported by a relevant degree and certifications like CISA or CISSP. Familiarity with audit management tools, GRC platforms, and frameworks such as SOC 2, ISO 27001, and NIST is essential. Strong leadership, analytical thinking, and communication skills set top performers apart in this role. These competencies are vital to ensure organizational compliance, effective risk mitigation, and successful coordination with stakeholders during SOC 2 audits.

How does a Director SOC 2 Analyst typically collaborate with other departments to ensure compliance and security objectives are met?

A Director SOC 2 Analyst works closely with IT, legal, compliance, and operations teams to align organizational processes with SOC 2 requirements. This collaboration often involves coordinating regular risk assessments, facilitating audits, and implementing control frameworks across departments. Effective communication and cross-functional teamwork are essential, as the analyst must gather evidence, address gaps, and ensure that all teams understand their roles in maintaining compliance. This collaborative approach helps streamline the audit process and supports a strong culture of security within the organization.

What is the difference between Director Soc 2 Analyst vs Security Analyst?

AspectDirector Soc 2 AnalystSecurity Analyst
CertificationsSOC 2, CISSP, CISACISSP, CompTIA Security+
Work EnvironmentLeadership, strategic planning, compliance oversightTechnical, monitoring, incident response
Industry UsageIT, finance, healthcare, compliance-focused organizationsIT security, cybersecurity firms, corporate IT teams

The Director Soc 2 Analyst primarily oversees SOC 2 compliance, managing audits and policies, while a Security Analyst focuses on technical security measures and incident response. Both roles require certifications like SOC 2 and CISSP, but the Director has a broader strategic and managerial scope, whereas the Security Analyst is more hands-on with security operations.

More about Director Soc 2 Analyst jobs
What cities are hiring for Director Soc 2 Analyst jobs? Cities with the most Director Soc 2 Analyst job openings:
What are the most commonly searched types of Soc 2 Analyst jobs? The most popular types of Soc 2 Analyst jobs are:
What states have the most Director Soc 2 Analyst jobs? States with the most job openings for Director Soc 2 Analyst jobs include:
What job categories do people searching Director Soc 2 Analyst jobs look for? The top searched job categories for Director Soc 2 Analyst jobs are:
Director Soc 2 Analyst jobs near you
Infographic showing various Director Soc 2 Analyst job openings in the United States as of June 2026, with employment types broken down into 1% As Needed, 85% Full Time, 13% Part Time, and 1% Temporary. Highlights an 81% Physical, 6% Hybrid, and 13% Remote job distribution.
SOC Tier 2 Analyst

SOC Tier 2 Analyst

ECS

Portland, OR • On-site

Full-time

Posted 28 days ago

Job description

Everforth ECS is seeking a SOC Tier 2 Analyst to work in our Portland, OR office.
The SOC Analyst 2 supports the organization's security operations by conducting deeper investigation of escalated alerts, correlating security telemetry, supporting incident response activities, and preparing incident summaries and recommendations. This role is the mid-level investigation and response-support tier within the SOC Analyst role family.
The ideal candidate has hands-on SOC or security operations experience, understands common attack techniques and defensive technologies, and can independently investigate security events while coordinating with SOC Analyst 1, SOC Analyst 3, threat intelligence, threat hunting, forensics, engineering, and business stakeholders.
This role involves shift work schedule to support our 24/7 operation, including weekends and holidays. Candidates must be flexible in their availability. While we make every effort to accommodate individual preferences, it's essential to understand that specific shift requests are not guaranteed and are assigned based on operational needs.
Key Responsibilities
Escalated Alert Investigation & Correlation
  • Review and investigate alerts escalated by SOC Analyst 1 or automated SOC workflows to validate severity, scope, potential impact, and required response actions.
  • Analyze suspicious activity, indicators of compromise, anomalous behavior, and policy violations using logs, endpoint telemetry, network data, identity data, cloud events, and other evidence.
  • Correlate evidence across security platforms to identify affected assets, affected accounts, attack paths, timeline of activity, and potential business or mission impact.
  • Map observed behaviors to applicable frameworks and threat models such as MITRE ATT&CK when useful for investigation, reporting, or detection improvement.

Incident Response & Coordination Support
  • Support containment, eradication, and recovery activities for standard or moderate incidents in alignment with incident response plans and approved playbooks.
  • Coordinate with system owners, security engineers, senior analysts, and other technical teams to gather evidence, validate impact, and support response actions.
  • Escalate complex, high-impact, evidence-sensitive, or ambiguous incidents to SOC Analyst 3, SOC leadership, Forensics, Threat Hunter, Threat Intelligence Analyst, or other specialized roles as appropriate.
  • Maintain accurate incident status, action tracking, and communications during investigation and response activities.

Detection, Tuning & Process Improvement Input
  • Analyze recurring alerts, false positives, attack patterns, threat intelligence, vulnerabilities, and emerging tactics to identify opportunities to improve detection and response.
  • Recommend updates to correlation rules, alert logic, dashboards, use cases, response playbooks, and triage procedures based on investigation outcomes.
  • Operationalize threat intelligence in triage and investigation workflows by applying relevant indicators, adversary behaviors, vulnerabilities, and contextual reporting.
  • Provide operational requirements and validation feedback to SOC Analyst 3, SOC Threat Hunter, Senior Splunk Engineer, Splunk Architect/Lead, Security Engineer, and SOC Technical Writer as appropriate.

Reporting & Documentation
  • Document investigation activities, evidence, decisions, response actions, and outcomes clearly and accurately.
  • Prepare incident summaries, ticket updates, timelines, shift handoff notes, and supporting information for after-action documentation.
  • Communicate technical findings in clear operational, business, and risk language for SOC leadership and affected stakeholders.
  • Provide evidence summaries and analysis notes that can be used by Forensics or specialized teams when deeper analysis is required.

Mentorship & Continuous Improvement
  • Provide escalation guidance, quality feedback, and informal mentoring to SOC Analyst 1 personnel.
  • Participate in lessons-learned activities, tabletop exercises, detection reviews, and SOC process improvement efforts.
  • Stay current with evolving cyber threats, vulnerabilities, detection techniques, and security operations best practices.
  • Contribute to continuous improvement of SOC workflows, investigation checklists, documentation practices, and escalation procedures.

  • U.S. Citizenship with ability to obtain and maintain a DOE "L" clearance after start.
  • 3-5 years of experience in SOC operations, incident response, security monitoring, threat monitoring, or related technical cybersecurity roles.
  • Experience triaging escalated alerts and investigating security events using SIEM, EDR, ticketing, case management, and log analysis tools.
  • Intermediate knowledge of Windows, Linux, networking, cloud, identity, endpoint, and application security concepts.
  • Working knowledge of common attack techniques, incident response lifecycle activities, escalation procedures, playbooks, and evidence-handling practices.
  • Ability to correlate evidence across multiple tools, develop incident timelines, and determine recommended response actions.
  • Strong analytical, written documentation, communication, and collaboration skills, including the ability to guide SOC Analyst 1 personnel.

Apply