SOC Cyber Security Specialist
Summary
On-site SOC specialist in ON2IT's global Security Operations Center (Plano, TX): analyze customer network alerts and threats, fix security issues in routing/networks, and configure Zero Trust security controls. Core tech includes networking (routers, switches, firewalls, SSH/SSL/HTTPS/SMTP/DHCP), AI-assisted MDR tooling, git and Markdown.
The role
You analyze what is really happening on a customer’s network, decide what matters, and configure the controls that stop the next attempt. You work on-site in Plano, TX, part of our global Security Operations Center (GSOC) team.
What you will do
• Analyze - anomalies, alerts and threats, and decide what is real
• Fix - security issues in routing and networks
• Configure - security controls along Zero Trust principles
• Work hands-on - with protocols like SSH, SSL, HTTPS, SMTP and DHCP, and whatever else the customer runs
• Document - your work so the colleague taking over hits the ground running
How we work with AI
We invest in AI for two reasons: it keeps us ahead of innovation, and it keeps pace with how fast modern threats change. AI is built into our service, not bolted on. MDR Detect™ runs AI-assisted case handling behind our human-led GSOC, and we build our own AI infrastructure, shaped by the specialists who use it. That could be you. No problem if you are not an expert yet. Curious and honest about the gaps? Essential.
Who you are
• You pull the thread - until you understand it, and you say “I don’t know yet” instead of guessing
• You own it - a customer’s request stays yours until it is solved
• You read the organization - not just the network
• You convince with insight - not volume, and you explain without making anyone feel stupid
Experience
• Relevant experience - 2-3 years of experience in a SOC, NOC, or similar security-operations role
Technical foundation
• Networking - routers, switches, firewalls (CCNA level, or heading there)
• Concepts - network segmentation, VPN, NAT, DNS and certificates
• Security thinking - least privilege, defense in depth, and how an attack moves once it is inside
• Systems - Windows, macOS and Linux
• Protocols - the common ones (SSH, SSL, HTTPS, SMTP, DHCP) and the confidence to pick up the rest
• Certifications - a relevant certification (for example CCNA or Security+) or actively working toward one; we sponsor further certification
AI and modern tooling
• You use AI daily - and can explain how, not just that you do
• You get prompting - context and structure, not incantations
• You spot repetition - and package it into something reusable
• You respect confidentiality - customer data does not go just anywhere
• You can use git - clone, branch, commit, open a merge request
• You can write Markdown - our runbooks and AI context live in plain text
The rest
• English - excellent, spoken and written
• On-site - required. This is not a hybrid role, and you live within commuting distance of our Plano, TX office
• Screening - due to the sensitive nature of the job, every hire goes through pre-employment screening
Nice to have
• Product experience - Palo Alto Networks Strata or Cortex, Microsoft Defender, Fortinet FortiGate or similar
• Background - SOC, NOC or managed services experience
• Certifications - Palo Alto Networks Security Operations Professional, Palo Alto Networks Network Security Professional, CompTIA Security+, or Microsoft Security Operations Analyst
• Scripting - Python, Bash or similar
Skills
As published by recruitee · 5 questions
Basics
Full name, Email, CV, Cover letter, Phone
Pick from a list (5)
- Can you reliably commute to this job's location?
- Are you authorized to work in the United States without any employer sponsorship? (No H1B sponsorship available).
- Do you have the following license or certification: CCNA?
- Are you willing to undergo a background check, in accordance with local law and regulations?
- You confirm you understand that this position is fully on-site and remote work is not available