Senior SOC Analyst | MDR

Accountabilities:

• Work as part of a 24/7 Cyber Defense team operating on rotational shifts to continuously monitor and respond to security threats across multiple environments.
• Investigate and triage advanced security alerts, determining their legitimacy, root cause, scope, business impact, and relevance while identifying evolving attack vectors.
• Correlate telemetry and alerts from SIEM platforms, EDR solutions, intrusion prevention systems, firewalls, threat intelligence sources, and other security technologies to distinguish genuine threats from false positives.
• Analyze and respond to detections affecting cloud infrastructure, services, and applications, applying appropriate investigation and response techniques across modern cloud environments.
• Provide clear recommendations for containment, mitigation, remediation, and recovery to client or internal incident response teams based on investigation findings.
• Contribute to the development, refinement, and tuning of detection rules, analytics, and security use cases to improve threat visibility and strengthen the overall defensive posture.
• Collaborate with Threat Intelligence, SOAR, and Engineering teams to enrich alerts, add contextual information, improve investigations, and enhance security operations.
• Document investigations, findings, evidence, and recommendations according to SOC procedures, reporting standards, service-level requirements, and operational quality expectations.
• Act as a subject matter expert in detection and response methodologies, including SIEM, SOAR, threat intelligence, log analysis, network telemetry, endpoint telemetry, and incident response techniques.
• Develop and maintain accurate SOC documentation, including standard operating procedures, playbooks, runbooks, investigation procedures, and other operational guidance.
• Mentor and guide junior analysts, promote continuous learning and operational excellence, and help maintain adherence to quality benchmarks and SLAs.

Requirements

• 4+ years of experience in incident response, SOC Tier 2 operations, or an equivalent security operations role is required.
• Strong understanding of adversary tradecraft and frameworks such as MITRE ATT&CK and the Cyber Kill Chain, with the ability to apply this knowledge during threat investigations.
• Deep understanding of cloud security concepts and experience investigating threats affecting cloud infrastructure, services, and applications.
• Hands-on experience with EDR, SIEM, SOAR, and security log pipelines, including the ability to correlate information across multiple telemetry sources.
• Strong knowledge of Windows, Linux, and cloud security, together with an understanding of endpoint and infrastructure security principles.
• In-depth knowledge of network protocols, endpoint artifacts, memory analysis, and log analysis, with the ability to use technical evidence to identify attack activity and root causes.
• Familiarity with scripting languages for security analysis, investigation, automation, or data processing is expected.
• Strong analytical and problem-solving skills, with the ability to investigate complex incidents, identify patterns, evaluate evidence, and make sound security decisions.
• Ability to remain calm and effective under pressure during active security incidents while working with minimal supervision and managing competing priorities.
• Excellent written and verbal communication skills, particularly when documenting technical findings and communicating security risks or recommendations to stakeholders.
• A collaborative mindset is important, along with the ability to work independently and maintain deep technical focus when conducting complex investigations.

Benefits

• $100,000–$110,000 annual salary.
• 401(k) retirement plan with an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed.
• Medical, dental, and vision insurance, available on the first day of the month following the employee's first day of employment.
• Group term life insurance, short-term disability, and long-term disability coverage.
• Access to voluntary benefits including life insurance, hospital indemnity, accident, and critical illness coverage.
• Participation in a Discretionary Time Off (DTO) program to support flexibility and work-life balance.
• 11 paid holidays annually.
• The opportunity to work within a technically advanced security operations environment focused on real-time threat detection, investigation, response, and cyber resilience.
• Exposure to modern security technologies and methodologies across SIEM, EDR, SOAR, cloud security, threat intelligence, detection engineering, and incident response.
• Opportunities to mentor other analysts, develop operational expertise, and contribute to continuous improvements in security detection and response capabilities.