SOC Specialist II

About the role

Expel is looking for a Junior Security Operations Center Analyst to join its Managed Phishing service. You will work on real‑world attacks, learn to think like an adversary, and help protect customers from phishing‑driven breaches.

Key responsibilities

• Monitor 24x7 security alerts and respond to phishing and other intrusion events.
• Analyze network traffic, logs, and endpoint data to identify malicious activity.
• Participate in incident response, containment, and remediation activities.
• Collaborate with senior analysts to develop detection rules and improve detection coverage.
• Document findings and communicate actionable recommendations to customers.

Required profile

• Flexibility and openness to new challenges in a fast‑growing environment.
• Client‑first mindset with a focus on high‑quality, timely support.
• Inquisitive mind, strong sense of humor, and willingness to ask for help when needed.
• Ability to prioritize competing tasks and maintain clear written communication.

Required skills

• Fundamental understanding of phishing tactics.
• Knowledge of TCP/IP and core application‑layer protocols.
• Basic proficiency with Windows, macOS, and Linux operating systems and command‑line tools.
• Familiarity with cloud applications such as O365 and Okta.
• Awareness of cloud infrastructure platforms (AWS, GCP, Azure).
• Understanding of the attack lifecycle/kill chain and common attack vectors, threat tactics, and attacker techniques.

What we offer

• Hands‑on experience with real networks and active threats.
• Mentorship from seasoned security analysts and incident responders.
• Collaborative, growth‑focused culture encouraging innovation.
• Opportunities to advance into Managed Detection & Response (MDR) roles.