SOC Analyst

Shape the Future with Us. At Lubrizol, we’re transforming through science, sustainability, and a culture of inclusion. As part of our global team, you’ll be empowered to make a real impact—on your career, your community, and the world around you.  

The Information Security Operations Center (SOC) Analyst is responsible for detecting, investigating, and responding to security threats to protect enterprise systems, data, and infrastructure. As part of a global SOC, this role focuses on operational security monitoring, incident analysis, and response execution while collaborating with DFIR, Threat Intelligence, and IT teams to continuously improve detection and response capabilities. This position is a member of the Information Technology (IT) division and reports to the Security Operations Center Manager.

• Incident Monitoring, triage, and response


• Execute defined incident response playbooks to investigate security incidents. This includes clear documentation of incident artifacts and business impacts/concerns.


• Support DFIR team with ad hoc security investigations as requested by Ethics, HR, and Legal


• Provide operational and administrative support, and full product lifecycle management of security tools (e.g., CASB, ITR, EDR, IDS/IPS, XDR, SIEM, malware analysis, web filtering, etc.).


• Participate in guided and hypothesis-driven threat hunting activities as part of scheduled SOC initiatives or in response to emerging threats.


• Stay up to date with the latest security threats, trends, and technologies, and make recommendations for enhancing security posture.


• Other information security activities as needed.

• Excellent analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.


• Ability to build relationships and work in a collaborative, matrix-driven, global environment.


• Ability to analyze logs across multiple data sources (endpoint, network, cloud)


• Understanding of common attacker techniques (MITRE ATT&CK)


• Strong incident timeline reconstruction skills


• Comfort making decisions with incomplete information


• Sound decision making, proactive/creative problem solving and strategic thinking skills.


• Must be a self-starter, able to manage multiple priorities and meet deadlines while providing quality customer service to internal and external stakeholders.


• Strong written and verbal skills.


• Knowledge and experience with security access administration systems and processes


• Familiarity with industry standards and frameworks (e.g. NIST, CIS Critical Security Controls, SANS, etc.)

Education / Certifications: 

• Bachelor’s degree in cybersecurity, or computer science or a related field with an equivalent combination of education and experience in cybersecurity

• 1 or more industry recognized cybersecurity certification (GSEC, GCIH, CEH, etc.)

Experience:

• 6-8 years of experience in SOC, incident response, or security operations–focused roles

Consider a Plus

• Scripting for automation (Python, PowerShell)


• Experience supporting full vendor stack security applications such as SIEM, IDS/IPS, endpoint protection, and vulnerability scanners.


• Familiarity with automation tools and AI-enhanced workflows


• Experience managing PAM technologies and services (e.g., BeyondTrust, CyberArk, HashiCorp, etc.)


• Cloud Security experience preferably Azure and Defender tool set


• Project management skills to handle multiple concurrent assignments in a timely manner.

Role Scope:

• SOC Analyst

Travel:

• Very Limited; < 15%

Work Hours:

• M-F 1st shift / Flextime 9-6

Physical Demands:

• General office-type activity