Job Title: SOC & GRC Security Analyst (Hybrid Onsite)

Location: Dallas, TX

Duration: 6 Months

Interview Type: Virtual / In-Person

Job Description:

We are seeking an experienced SOC & GRC Security Analyst to support Security Operations Center (SOC) monitoring, incident response, threat detection, vulnerability management, governance, risk, and compliance activities. The ideal candidate will combine hands-on cybersecurity operations experience with a strong understanding of security governance frameworks, regulatory requirements, risk assessments, and audit management.

The analyst will collaborate with cybersecurity teams, IT stakeholders, business leaders, auditors, and third-party vendors to identify and respond to security threats, evaluate security risks, maintain compliance, and improve the organization’s overall security posture.

Key Responsibilities:

Security Operations Center (SOC):

• Monitor security events and alerts using Security Information and Event Management (SIEM) platforms.
• Investigate suspicious activities, security alerts, and potential cybersecurity incidents.
• Perform initial incident triage, analysis, escalation, and response coordination.
• Analyze security logs and correlate events across endpoints, networks, cloud platforms, and applications.
• Support threat detection, threat hunting, and incident investigation activities.
• Document incidents, findings, root cause analysis, and remediation recommendations.
• Collaborate with security engineering, infrastructure, and IT teams to contain and resolve security incidents.

Incident Response & Threat Analysis:

• Support incident response activities throughout identification, containment, eradication, recovery, and post-incident review.
• Analyze indicators of compromise, attack patterns, malicious activities, and suspicious behaviors.
• Apply the MITRE ATT&CK framework and cyber kill chain concepts to support threat analysis.
• Assist with developing and improving incident response procedures and playbooks.
• Coordinate with internal teams and external stakeholders during significant security events.
• Prepare incident reports and communicate findings to appropriate stakeholders.

Vulnerability Management & Security Monitoring:

• Support vulnerability identification, assessment, prioritization, and remediation tracking.
• Review vulnerability scan results and coordinate mitigation activities with technical teams.
• Monitor endpoint, network, email, and cloud security controls.
• Identify weaknesses in security configurations, access controls, and protective technologies.
• Support security posture improvement initiatives and remediation validation.
• Assist with tracking security metrics, risk indicators, and remediation progress.

Endpoint, Network & Cloud Security:

• Support endpoint detection and response activities using EDR platforms.
• Investigate endpoint alerts and suspicious endpoint behavior.
• Apply knowledge of network security technologies, including firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and email security.
• Support endpoint protection, malware detection, and security configuration reviews.
• Analyze security events across Azure, AWS, and/or Google Cloud Platform (GCP) environments.
• Collaborate with infrastructure and cloud teams to address security findings and configuration risks.

Governance, Risk & Compliance:

• Support the development, implementation, and monitoring of security governance and compliance processes.
• Evaluate and document IT General Controls (ITGCs).
• Support compliance activities related to ISO/IEC 27001, GDPR, and the NIST Cybersecurity Framework.
• Assist with Risk Management Framework (RMF) activities and security control assessments.
• Conduct security risk assessments and document risks, impacts, likelihood, and mitigation strategies.
• Support Third-Party and Vendor Risk Management activities.
• Review vendor security documentation, assessments, questionnaires, and compliance evidence.
• Assist with audit preparation, evidence collection, control testing, and audit response activities.
• Track compliance gaps, remediation plans, risks, findings, and corrective actions.
• Prepare compliance reports, risk registers, dashboards, and executive-level presentations.
• Collaborate with auditors, business stakeholders, technical teams, and vendors to address compliance requirements.

Documentation & Reporting:

• Maintain accurate security operations, risk, compliance, and audit documentation.
• Develop process flows, security procedures, incident reports, risk assessments, and control documentation.
• Prepare management reports and presentations summarizing security incidents, compliance status, risks, and remediation activities.
• Communicate technical security issues and compliance risks clearly to technical and non-technical audiences.
• Support continuous improvement of cybersecurity processes, policies, and procedures.

Required Qualifications:

• Hands-on experience in SOC monitoring, incident response, threat detection, and vulnerability management.
• Experience working with SIEM platforms such as:
• Microsoft Sentinel
• Splunk
• IBM QRadar
• LogRhythm
• Experience with Endpoint Detection and Response (EDR) tools such as:
• Microsoft Defender
• CrowdStrike
• SentinelOne
• Strong knowledge of network security, firewalls, IDS/IPS, email security, and endpoint protection.
• Experience investigating security incidents and performing threat analysis.
• Experience supporting vulnerability management and remediation activities.
• Working knowledge of the MITRE ATT&CK framework and cyber kill chain concepts.
• Familiarity with cloud security concepts across Azure, AWS, and/or GCP.
• Strong understanding of IT General Controls (ITGC).
• Knowledge of ISO/IEC 27001, GDPR, and the NIST Cybersecurity Framework.
• Understanding of Risk Management Frameworks and security risk assessment methodologies.
• Experience supporting Third-Party/Vendor Risk Management.
• Experience with audit management, compliance reporting, and security documentation.
• Strong analytical, investigative, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work effectively with auditors, business stakeholders, cybersecurity teams, technical teams, and vendors.
• Experience preparing executive-level reports and presentations.

Preferred Qualifications:

• Experience working in enterprise SOC, cybersecurity, or GRC environments.
• Experience integrating SOC operations with governance, risk, and compliance processes.
• Knowledge of security control testing, evidence collection, and remediation tracking.
• Experience with security dashboards, compliance metrics, and risk reporting.
• Familiarity with cloud-native security monitoring and cloud compliance controls.
• Experience developing incident response playbooks, security procedures, and audit-ready documentation.
• Relevant cybersecurity, risk, or compliance certifications are beneficial.

Skill Matrix:

• SOC Monitoring: Required
• SIEM Platforms: Microsoft Sentinel, Splunk, QRadar, or LogRhythm
• Incident Response: Required
• Threat Detection & Threat Analysis: Required
• Vulnerability Management: Required
• EDR Platforms: Microsoft Defender, CrowdStrike, or SentinelOne
• Network Security: Required
• Firewalls / IDS / IPS: Required
• Email Security: Required
• Endpoint Protection: Required
• MITRE ATT&CK: Required
• Cyber Kill Chain: Required
• Cloud Security: Azure, AWS, and/or GCP
• IT General Controls (ITGC): Required
• ISO/IEC 27001: Required
• GDPR: Required
• NIST Cybersecurity Framework: Required
• Risk Management Frameworks: Required
• Security Risk Assessments: Required
• Third-Party / Vendor Risk Management: Required
• Audit Management & Compliance Reporting: Required
• Executive Reporting & Presentations: Required
• Security Documentation & Process Flows: Required

Deliverables:

• Develop and document cybersecurity, SOC, GRC, and compliance process flows.
• Provide mentoring and knowledge transfer to project team members.
• Participate as a primary, co-author, or contributing author on project deliverables within assigned areas of responsibility.
• Participate in data conversion and data maintenance activities where applicable.
• Provide cybersecurity best practices and industry-specific solutions.
• Recommend alternative and out-of-the-box security, risk, and compliance solutions.
• Provide thought leadership and hands-on technical configuration or development support as required.
• Participate as a member of the cybersecurity, SOC, and GRC teams.
• Prepare security incident reports, risk assessments, audit documentation, compliance reports, and remediation tracking updates.
• Perform other duties as assigned.

Position Requirements:

• Hybrid onsite position in Dallas, TX.
• Resource must work onsite at the Dallas office at least three days per week.
• Required onsite days are Tuesday, Wednesday, and Thursday.
• Remote-only candidates will not be considered.
• Virtual and/or in-person interview process.
• Duration: 6 months.

About GSK Solutions Inc:

GSK Solutions Inc. is a leading IT services company specializing in consulting solutions and staff augmentation. We deliver high-quality, on-time, and cost-effective solutions, consistently exceeding client expectations with superior execution.

#GSKIT

Pay: $55.00 - $60.00 per hour

Expected hours: 40.0 per week

Work Location: Hybrid remote in Dallas, TX 75244