SOC Analyst

Ericsson Inc. does not sponsor US work authorizations for this job position including H-1B, O-1, and TN. Ericsson also does not hire F-1’s working on EAD for this position. You need to be a US citizen and embody a merit-based, results-driven mindset, unencumbered by other topics competing for mental bandwidth. Your working hours are 10:30AM–6:30PM CT (11:30AM–7:30PM during Daylight Saving Time), and work is only done from the office. You will be required to work one weekend a month. We are now looking for a SOC analyst in our global Cyber Defense Center (CDC). We detect and respond to cyber attacks originating from external threat actors and ensure we are one step ahead of adversaries. Our aim is to identify their plans and means to execute them, block and disrupt their execution, and remove their presence from within Ericsson. CDC’s focus is on sophisticated antagonistic threat actors (APT’s) who can do the most harm to Ericsson as a company. Our focus is not on cyber hygiene. The SOC provides 24/7 cyber security monitoring, triage, incident response, and detection engineering focusing on a wide range of threat actors, finding the signal in the noise and responding to the bulk of malicious activities. The SOC collaborates with the other units in the CDC: CDC Threat Intelligence, CDC Incident Response and Threat Hunting, CDC AI, CDC Red Team, CDC IT, and CDC Process & Governance.

Responsibilities

Work in a follow the sun SOC, triaging and responding to prioritized alerts, supported by the other teams in CDC; responsible for validating whether the alert is a true or false positive, whether it is malicious, and responding according to the response plan; document analysis and conclusions; escalate to CDC incident response and threat hunting team where hands-on-keyboard or advanced/complex threat actor activity is determined and support scoping, containment and eviction; Work alongside agentic AI systems, commercial and in house developed, which provide guidance and automate repetitive and mundane tasks; Provide ideas and concrete contributions to improve and further automate the SOC, including detection engineering, reinforcement learning, Falcon Fusion workflows and Foundry apps; Spend considerable time on skills development using Immersive Labs, on the job training, quality review and feedback sessions, conferences and peer interaction

Requirements

US citizen; Merit-based, results-driven mindset, unencumbered by other topics competing for mental bandwidth; 4+ years of experience with and expertise in triage, response and detection engineering in SOCs; Thorough knowledge of how to use EDR/ITDR/cloud security/SIEM/exposure management tooling, preferably CrowdStrike Falcon, to make quality judgements on false/true positives and malicious/non malicious; General technical knowledge of a broad area of technologies such as cloud (AWS, GCP, Azure), Linux, Windows, network, identity, etc. and deep technical knowledge of at least one of these technologies; Good understanding of threat actor TTPs, can recognize markings in telemetry and logs, and know where to look next to validate or determine whether activity is a true or false positive, and whether it is malicious; Strong ambition and drive to catch threat actors, combined with a positive can-do attitude to continuously learn and improve; Stress tolerant, grounded and in control during crisis situations; Impeccable integrity and no urge to share confidential information

Nice to have

CrowdStrike Falcon

Benefits

Annual bonus opportunity via Short-Term Variable Compensation Plan; Sales Incentive Plan; Health benefits including choice of three medical plan options and a dental plan; Company credits for medical and dental premiums; 401(k) Plan with automatic 3% company contribution and matching contributions; Stock Purchase Plan; Basic life insurance; Accidental death and dismemberment coverage; Short-term and long-term disability coverage; Minimum 15 days accrued vacation; Up to 3 personal days per year; 11 annual holidays; 8 hours of volunteer time; 80 hours of sick time annually; Up to 16 weeks paid maternity leave; 6 weeks parental or adoption leave at 100% pay; Financial wellness programs; Educational assistance; Matching gifts; Recognition programs