Freelance Triage Analyst Jobs (NOW HIRING)

We are looking for an experienced Senior SOC Analyst to join our Security Operations Center (SOC) on a part-time/freelance basis to provide weekend operational coverage. This role is ideal for an experienced cybersecurity professional seeking flexible weekend work while remaining engaged in real-world security operations across multiple client environments. As part of our Managed Security Services (MSSP) team, you will monitor security events, investigate alerts, respond to incidents, and ensure continuous protection for our customers during weekend shifts. You will work alongside our global SOC team, following established procedures while contributing your expertise to incident investigations and operational improvements.

• Part-time / Freelance
• Weekend coverage (Saturday and Sunday)
• Half-day shifts (approximately 4–6 hours per day)
• Remote position

• Monitor, investigate, and respond to security alerts and incidents across multiple client environments.
• Perform incident triage, analysis, containment, remediation, and escalation when required.
• Handle SOC tickets and customer requests during assigned weekend shifts.
• Conduct proactive threat hunting using SIEM, EDR, network, and endpoint telemetry when operational workload allows.
• Analyze logs and security telemetry using Elastic Stack and related technologies.
• Investigate suspicious activity across Windows, Linux, cloud, and network environments.
• Maintain awareness of ongoing investigations and provide proper handover notes to weekday SOC analysts.
• Monitor the health of SIEM, EDR, log pipelines, and security monitoring infrastructure.
• Collaborate with the SOC team during active security incidents.
• Prepare incident reports, investigation findings, and customer-facing updates.
• Identify opportunities to improve detection logic, SOC workflows, and operational processes.
• Stay current with emerging threats, attacker techniques, and cybersecurity trends.

• Strong hands-on experience working in a SOC, MDR, or Incident Response environment.
• Deep understanding of modern cyber-attacks, attacker methodologies, and intrusion techniques.
• Strong incident response and investigation experience.
• Experience with SIEM platforms, particularly Elastic Stack (Elasticsearch, Logstash, Kibana).
• Knowledge of EDR/XDR technologies and security monitoring architecture.
• Strong knowledge of networking concepts, protocols, and traffic analysis.
• Experience with IDS/IPS technologies and detection engineering.
• Good Linux administration and troubleshooting skills.
• Ability to automate operational tasks using Python, Bash, or PowerShell.
• Experience creating detection rules and threat hunting queries.
• Understanding of the MITRE ATT&CK framework.
• Knowledge of Windows, Linux, Active Directory, cloud, and network security.
• Strong analytical and problem-solving skills.
• Ability to work independently with minimal supervision.
• Excellent communication and documentation skills.
• Comfortable working in a fast-paced MSSP environment supporting multiple customers.

• Take ownership of incidents from investigation through resolution.
• Are naturally curious and investigative.
• Can work independently and make sound technical decisions.
• Stay calm and methodical during active security incidents.
• Communicate clearly during shift handovers.
• Continuously seek ways to improve security operations.
• Enjoy working in a collaborative, distributed SOC environment.
• Value flexibility and reliability, especially during scheduled weekend coverage.

• 3+ years of experience in a SOC, MDR, Incident Response, or similar cybersecurity role.
• Experience with Elastic Stack (ELK).
• Experience with SIEM, EDR, IDS/IPS, and log analysis platforms.
• Scripting or automation experience (Python, Bash, or PowerShell).
• Experience with cloud platforms such as Azure, AWS, or GCP is considered an advantage.
• Experience working in an MSSP environment is highly preferred.
• Security certifications such as GIAC, GCIH, GCIA, GCFA, CISSP, Security+, Blue Team, or Red Team certifications are considered an advantage.
• Must be available to work scheduled weekend shifts on a consistent basis.
• Reliable internet connection and a suitable home office environment for remote work.

• Flexible part-time/freelance engagement.
• Fully remote work.
• Opportunity to work with modern security technologies including Elastic Stack, EDR, cloud platforms, and enterprise security tooling.
• Exposure to diverse environments across multiple industries.
• A collaborative, highly technical team focused on continuous learning and operational excellence.
• Competitive compensation based on experience.

Note: This position is intended specifically to provide weekend SOC coverage and is not a full-time role. Candidates should be comfortable committing to scheduled weekend shifts on an ongoing basis. Responsibilities may evolve based on operational needs.