Part 6 — Mock Interview + Final Polish

What should your tone be?

Honest, calm, trainable, and confident

Final interview goal

Sound like a real junior SOC analyst who has touched logs, worked alerts, generated vulnerability reports, knows his limits, and can learn fast

Why should BFS hire you?

I have hands-on Rapid7 experience, understand SOC triage, have worked with logs and vulnerability reports, document clearly, escalate properly, and can learn new tools quickly

What do you want to learn next?

I want to grow deeper in incident response, XDR/SOAR, detection tuning, automation, endpoint response, and security engineering

What if you do not know an answer?

Be honest, explain your related experience, and say how you would approach learning or escalating

Best question to ask Ryan

With the new CISO coming in and more investment going into security, what are the biggest priorities for the team over the next 6–12 months?

First 90 days question

What would you want someone in this role to be able to handle within the first 90 days?

Tools question

What SIEM, XDR, and SOAR tools would this role use most day to day?

Role balance question

How much of the role is alert triage versus detection tuning, automation, or tool improvement?

Escalation question

How does escalation work between SOC analysts, security engineers, and leadership?

Common alerts question

What are the most common types of alerts or incidents the team handles?

Salary answer

I’m flexible depending on the full compensation package. Do you have a budgeted salary range?

If pushed for salary number

I was targeting around $80,000, but I’m flexible depending on the overall package and team’s budgeted range

Do not oversell

Do not claim tools or responsibilities you have not actually used

Main final reminder

Focus on Rapid7, log review, alert triage, vulnerability reporting, documentation, escalation, and willingness to learn