ZipRecruiter

Log In

1

Level Two Soc Analyst Jobs in Kansas (NOW HIRING)

Foresite MSP

SOC Analyst

Overland Park, KS · On-site

$60 - $80/hr

Foresite is seeking a SOC Analyst I who has a passion for security, a keen eye for detail, and a ... Experience: 0-2 years of prior experience in a SOC , IT security , IT operations , or helpdesk/NOC ...

Socket.dev

SOC Analyst

Overland Park, KS · On-site

$60 - $80/hr

Experience: 0-2 years of prior experience in a SOC, IT security, IT operations, or helpdesk/NOC ... Blue Team Level 1 (BTL1), CompTIA CySA+, GCIA, or Google Cloud Security Engineer Why Join Foresite?

Foresite

SOC Analyst

Overland Park, KS

Experience: 0-2 years of prior experience in a SOC, IT security, IT operations, or helpdesk/NOC ... Blue Team Level 1 (BTL1), CompTIA CySA+, GCIA, or Google Cloud Security Engineer Why Join Foresite?

Foresite

SOC Analyst

Overland Park, KS · On-site

Experience: 0-2 years of prior experience in a SOC, IT security, IT operations, or helpdesk/NOC ... Blue Team Level 1 (BTL1), CompTIA CySA+, GCIA, or Google Cloud Security Engineer Why Join Foresite?

TryHackMe Ltd

Security Analyst

Mission, KS · On-site

$80 - $100/hr

Cyber Security Analyst (SOC Analyst) The SOC Analyst is a front-line role in identifying threats and vulnerabilities, and implementing tools to help the team tackle them. Average Salary $80,000/year ...

Lightedge

Security Architect

Kansas City, KS · On-site

$62.75 - $81/hr

... SOC 2, HIPAA/HITRUST, PCI-DSS, ISO 27001, NIST, and other applicable frameworks. * Create clear architecture documentation, diagrams, standards, and executive-level risk summaries. * Provide ...

HaysMed

Applications Analyst (Level I-III)

Hays, KS · On-site

$85K - $133K/yr

Level II: Required: * Associate Degree or equivalent technical training and 5 years' experience in a Healthcare setting as Application Analyst. Preferred: * Bachelor's Degree in computer science ...

HaysMed

Applications Analyst (Level I-III)

Hays, KS · Hybrid

Level II: Required: * Associate Degree or equivalent technical training and 5 years' experience in a Healthcare setting as Application Analyst. Preferred: * Bachelor's Degree in computer science ...

next page

Showing results 1-20

All JobsLevel Two Soc Analyst JobsLevel Two Soc Analyst Jobs in Kansas

Level Two Soc Analyst information

What is the difference between Level Two Soc Analyst vs Level One Soc Analyst?

AspectLevel Two Soc AnalystLevel One Soc Analyst
CertificationsCompTIA Security+, CEH, CISSP (preferred)CompTIA Security+ or equivalent
Work EnvironmentAdvanced security operations center, handling complex incidentsEntry-level monitoring and alert analysis
ResponsibilitiesAnalyzing complex threats, escalating incidents, and guiding junior staffMonitoring alerts, initial incident detection, basic analysis

The main difference between a Level Two Soc Analyst and a Level One Soc Analyst lies in experience, responsibilities, and complexity of tasks. Level Two analysts handle more complex security incidents, require advanced certifications, and often guide Level One staff. Level One analysts focus on basic monitoring and alert analysis. Both roles are essential in a security operations team, but Level Two analysts bring deeper expertise and problem-solving skills.

What cities in Kansas are hiring for Level Two Soc Analyst jobs?

Cities in Kansas with the most Level Two Soc Analyst job openings:

Level Two Soc Analyst jobs near you
Infographic showing various Level Two Soc Analyst job openings in Kansas as of September 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution.

SOC Analyst

Overland Park, KS • On-site

Foresite MSP
See more jobs at Foresite MSPexternal

$60 - $80/hr

Other

Posted 4 days ago

Job description

Foresite is seeking a SOC Analyst I who has a passion for security, a keen eye for detail, and a drive to protect organizations from cyberattacks. It's more than just a job; it's a launching pad for your cybersecurity career and a first step towards an exciting future at Foresite.

What You'll Do:

The SOC Analyst I is the entry point to a structured career in Foresite’s Security Operations Center. You will work a dedicated shift inside our 24/7 Cyber Fusion Center, monitoring and triaging security alerts for our managed customers across Google Security Operations (Chronicle), our SOAR platform, and supporting tools. You will learn our detection stack, our customer environments, and our investigation process from experienced analysts and team leads, and you will be measured on clear, published performance criteria that define what it takes to advance to SOC Analyst II.

  • Monitor and triage alerts across Google Security Operations (Chronicle) and the Foresite ticketing queue for assigned customer environments during your shift.
  • Investigate Tier 1 incidents end-to-end: review alert context, gather evidence from Chronicle UDM and supporting tools, reach an initial disposition, and either close the ticket with a documented rationale or elevate as needed with a clear handoff.
  • Follow established investigation playbooks for the top alert types and rule categories in our detection stack, and flag gaps or outdated guidance to your Team Lead for improvement.
  • Communicate clearly in tickets. Every ticket you touch should be understandable by the next analyst, the customer, or an auditor reading it six months from now. Your written analysis is the primary artifact of your work.
  • Partner with customers through the ticketing system on routine investigations, requests for information, and exclusion/suppression requests under Team Lead oversight.
  • Meet SLA and quality targets for first-touch time, triage accuracy, and ticket closure quality as defined in the L1 performance scorecard.
  • Participate in shift handoff — brief the incoming analyst on open investigations, anomalies observed during your shift, and anything waiting on customer response.
  • Contribute to detections fidelity by flagging noisy rules, false-positive patterns, and alert clusters that should be reviewed by the detection engineering team.
Who you are:

  • Experience: 0–2 years of prior experience in a SOC, IT security, IT operations, or helpdesk/NOC role. Recent graduates of a cybersecurity degree or certificate program are encouraged to apply.

  • Working knowledge of core security concepts: the cyber kill chain or MITRE ATT&CK framework, common attack vectors (phishing, credential abuse, malware delivery, lateral movement), and the difference between detection, prevention, and response.
  • Familiarity with a SIEM: You do not need Chronicle experience on day one — we will train you — but you must be able to explain what a SIEM does, how alerts are generated, and how to pivot from an alert to supporting log evidence.
  • Strong written communication: You will be writing in tickets that customers read. Clear
#J-18808-Ljbffr

Apply