SOC Analyst

Who We Are Williams International is a privately-owned company that develops and manufactures jet engines for both military and commercial aircraft applications. We are a company of creators who deliver pioneering ideas and technologies that lead the aerospace industry. Our culture fosters creativity, collaboration, and continuous learning to position our team members to inspire each other and provide quality products and supporting services that exceed the expectations of our customers. The Opportunity Williams International has an exciting opportunity for a SOC Analyst. The SOC Analyst will serve as our front-line defense against cyber threats. You will monitor our enterprise environment using advanced security tools, analyze real-time security alerts, and perform initial triaging to determine severity. Your primary goal is to ensure potential security incidents are identified, documented, and escalated or mitigated quickly to protect our infrastructure. Responsibilities Alert Monitoring: Continuously monitor Security Information and Event Management (SIEM) consoles, EDR platforms, and network dashboards for potential security incidents. Triage & Classification: Perform initial analysis on high-volume alerts to filter out false positives and accurately categorize true security events. Incident Escalation: Escalate validated threats to Tier 2/3 analysts or incident responders with clear, comprehensive technical documentation. Log Analysis: Review and interpret logs from various sources—including firewalls, intrusion detection systems (IDS/IPS), active directory, endpoints, and cloud environments (AWS/Azure). Phishing Investigations: Triage suspected employee phishing reports by analyzing email headers, attachments, and embedded URLs in a secure sandbox. Ticketing & Documentation: Document all investigative steps, findings, and remediation actions within the designated ticketing system (e.g., Jira, ServiceNow). Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent hands-on experience. SIEM/EDR Exposure: Minimum 1 year of hands-on experience navigating and querying SIEM platforms (e.g., Splunk, Elastic Search, Wazuh) and EDR/XDR agents (e.g., Defender for Endpoint). Networking Foundations: Solid understanding of the OSI model, TCP/IP networking, common protocols (DNS, HTTP, SMTP, SSH), and basic network routing/switching. Operating Systems: Proficiency in navigating and reviewing logs across Windows Active Directory environment and Linux environments. Framework Familiarity: Basic knowledge of cyberattack methodologies, including the MITRE ATT&CK framework or the Cyber Kill Chain. U.S. citizenship is required Position requires the ability to obtain a U.S. Government Security Clearance, if needed. Candidates selected may be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. For more information on Security Clearances, please visit: U.S. Department of State . Preferred Qualifications & Certifications While not strictly required, the following credentials highly differentiate candidates: Certifications: CompTIA Security+, CompTIA CySA+ (Cybersecurity Analyst), GiAC Security Essentials (GSEC), or Cisco Certified CyberOps Associate. Scripting: Basic ability to read or modify scripts (Python, PowerShell, or Bash) to assist in automating repetitive daily workflows. Home Labs / Capture the Flag (CTF): Active participation in hands-on learning platforms like TryHackMe, Hack The Box, or Blue Team Labs Online. Additional Information Williams International is a Drug Free Workplace where all new team members and contractors are subject to pre-employment drug testing for the following controlled substances: marijuana, cocaine, PCP, amphetamines, opioids and alcohol as policy dictates. Williams International is committed to equal employment opportunities for all individuals regardless of race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, and protected veteran status. Please view Equal Employment Opportunity Posters provided by OFCCP here . If you are interested in applying for employment with Williams International and need special assistance or an accommodation to use our website or to apply for a position due to a physical and/or mental disability, please send an e-mail with your request to HR@Williams-int.com . Or please call 248-624-5200. Determination on requests for reasonable accommodation is made on a case-by-case basis.