助理SOC分析师
Associate SOC Analyst
你有热情，有好奇心，当别人继续前进时，你会问“为什么？”你喜欢解决谜题，学习新工具，理解事物的工作原理（以及它们如何出错）。也许你做过一些实际的IT工作，研究过数据包捕获，甚至曾出于兴趣阅读最新的漏洞信息。如果你觉得自己就是这样的人，那么你可能正是我们需要的人。
在Expel，我们通过像攻击者一样思考来保护客户。我们的分析师会调查警报，深入分析数据，并以同理心和精准的方式传达发现。作为**初级SOC分析师**，你将站在我们托管检测与响应（MDR）服务的第一线，帮助在从终端到云的多样化环境中检测、分析和应对威胁。
这不仅仅是一个入门职位，更是一个起点。我们会培训你、指导你，帮助你从第一次警报处理逐步成长为全面的调查人员。你将向经验丰富的分析师学习，他们见过一切（并活下来分享段子）。你将在真实场景中磨练技能，保护真实的组织，并产生可见的影响。
* * *
### **Expel能为你做什么**
- 分析和调查警报，识别、评估并响应潜在威胁。
- 与团队成员和客户安全团队合作，修复事件并加强防御。
- 进行威胁狩猎和根本原因分析，发现攻击者活动。
- 对警报进行全程管理，从检测到解决。
- 持续寻找改进我们为客户检测、防御和交付方式的方法。
- 参与24x7轮班值班，因为攻击者不会休息。
* * *
### 你能为Expel做什么（当然，在培训的帮助下）
- 让你脱离理论，进入真实的网络安全操作。
- 使你置身于经验丰富的导师身边，他们希望看到你成功。
- 提供培训、工具和实战经验，加速你的职业发展。
- 让你融入一个协作、注重成长的文化，重视好奇心、沟通和创造力。
- 提供透明的薪酬、无限带薪假期、灵活的工作安排，以及最多24周的育儿假。
* * *
### **你需要带来什么**
- 正直、好奇心和以客户为中心的心态。
- 良好的书面沟通能力，无论是在与同事交流还是撰写客户报告时，都能适应不同的语气和细节。
- 对TCP/IP、操作系统和常见网络协议有基本的理解。
- 有实际的安全运营经验，例如使用SIEM工具、分析日志或参与事件响应。
查看英文原文
You’ve got the spark, the curiosity that makes you ask “why?” when others move on. You love solving puzzles, learning new tools, and understanding how things work (and how they break). Maybe you’ve done some hands-on IT work, tinkered with packet captures, or even caught yourself reading about the latest exploits for fun. If that sounds like you, you might be exactly who we’re looking for.
At Expel, we protect customers by thinking like attackers. Our analysts investigate alerts, dig through data, and communicate findings with empathy and precision. As an **Associate SOC Analyst**, you’ll be on the front lines of our Managed Detection & Response (MDR) service, helping detect, analyze, and respond to threats across diverse environments from endpoint to cloud.
This is more than an entry point, it’s a launch pad. We’ll train you, mentor you, and help you grow from your first alert triage to full-scale investigations. You’ll learn from expert analysts who’ve seen it all (and lived to meme about it). You’ll refine your craft in real-world scenarios, protecting real organizations, and making a visible impact.
* * *
### **What Expel Can Do For You**
- Analyze and investigate alerts to identify, assess, and respond to potential threats.
- Collaborate with teammates and customer security teams to remediate incidents and strengthen defenses.
- Conduct threat hunts and root-cause analysis to uncover attacker activity.
- Take ownership of alert triage through the entire lifecycle—from detection to resolution.
- Constantly look for ways to improve how we detect, defend, and deliver for our customers.
- Participate in 24x7 rotational coverage, because attackers don’t sleep.
* * *
### What You Can Do For Expel (With the help of training, of course)
- Get you out of theory and into real security operations.
- Surround you with seasoned mentors who want to see you succeed.
- Offer training, tools, and hands-on experience to accelerate your career.
- Immerse you in a collaborative, growth-minded culture that values curiosity, communication, and creativity.
- Provide transparent pay, unlimited PTO, flexible work, and up to 24 weeks parental leave.
* * *
### **What You Should Bring With You**
- Integrity, curiosity, and a client-first mindset.
- Strong written communication, you can adapt tone and detail whether you’re messaging a teammate or writing a customer report.
- A fundamental understanding of TCP/IP, operating systems, and common network protocols.
- Experience with Windows, macOS, and Linux systems, including command-line familiarity.
- Awareness of cloud applications (O365, Okta) and cloud infrastructure (AWS, Azure, GCP).
- Familiarity with detection and response tools like SIEM, EDR, and IDS/IPS.
- A curiosity about attacker techniques, the MITRE ATT&CK framework, and how defenders can outsmart them.
- 1–2 years of IT or security experience is preferred, but if you’ve got passion, potential, and a compelling story, we want to hear it.
* * *
### **Additional notes**
The base salary range for this role is between $85,000 USD and $90,000 USD + 20% bonus (paid out quarterly) & equity.
We believe in paying transparently and equitably. Your salary will ultimately be based on factors such as your experience, skills, team equity, and market data. You’ll also be eligible for unlimited PTO (which we model and encourage), work location flexibility, up to 24 weeks of parental leave, and really excellent health benefits.
We’re only hiring those authorized to work in the United States. We do not currently sponsor immigration visas.
We’re an Equal Opportunity Employer: You’ll receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.
We’ll ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please let us know if you need accommodation of any kind.
Salary Range
$85,000—$90,000 USD