US Remote (Eastern-hours shift coverage) | 12-Month **** Contract | 3 OpeningsPrincipals only.
No agencies, no corp-to-corp, no third-party submissions.The RoleNearshore Cyber is recruiting three experienced SOC analysts for a partner's enterprise client.
This is hands-on-keyboard security operations work in a mature, Splunk-centered environment: you will triage and investigate alerts, hunt threats, write and tune detections, and automate away the repetitive work that slows response down.
The team runs shift coverage, so flexibility on schedule is a condition of the role, not a nice-to-have.This suits an analyst in the 3–5 year range who has outgrown pure alert-queue work and wants to build detection content and automation, not just consume it.What You Will DoPerform advanced SOC analysis: triage, investigation, incident reporting, and threat huntingBuild and refine security detection content in Splunk Enterprise SecurityWork across ticketing and orchestration platforms to remediate alerts and improve detection qualityDrive continuous improvement: alert tuning, log management, and automation of repetitive tasksRequired Qualifications3–5 years as a cybersecurity analyst,



including a minimum of 3 years in a SOC environmentDemonstrated experience in incident response, triage, threat detection, and alert tuningAdvanced Splunk ES/Core skills, including writing complex SPL queries — this is a mustFamiliarity with email and endpoint security platforms such as Proofpoint TAP/TRAP and CrowdStrike FalconComfortable with shift workStrong communicator who works well with cross-functional teamsGenuine interest in growing a cybersecurity careerPreferred QualificationsHands-on experience with cloud security platforms such as Wiz and ZscalerCertifications such as CompTIA Security+, Network+, OSCP, or CySA+Scripting in Python or PowerShell for automation and enrichmentExperience applying AI tools (Claude Code, Codex, Cursor, LLMs) to security problemsLogisticsIndependent contractor *****) engagement for a 12-month term, extension possibleFully remote within the US; working hours align to US Eastern time with shift rotationCompetitive hourly rate, DOEDirect applicants only; submissions through staffing firms will not be considered

📌 Soc Analyst (Mid-Level) (Xico)
🏢 Nearshore Cyber
📍 Xico