Senior SOC Analyst

About the role

This is a senior security operations role focused on incident response, threat hunting, and security operations. You will conduct in-depth investigations into security incidents, perform forensic analysis on compromised systems, and proactively search for advanced threats within the network. You will also contribute to process improvement, mentorship of junior analysts, and security projects across the organization.

Key responsibilities

• Conduct in-depth investigations into security incidents, identifying root causes, scope, and impact

• Perform forensic analysis on compromised systems and data to gather evidence and intelligence

• Develop and implement remediation strategies to contain and eradicate threats

• Create detailed incident reports and post-mortem analyses, documenting findings and lessons learned

• Proactively search for advanced persistent threats (APTs), zero-day exploits, and other sophisticated attack techniques within the network and systems

• Develop and utilize threat intelligence to identify new indicators of compromise (IOCs) and attack patterns

• Leverage security tools and network telemetry to uncover stealthy activities and anomalous behaviors

• Evaluate existing security processes, procedures, and tools for effectiveness and efficiency

• Provide guidance, coaching, and technical mentorship to junior security analysts

• Conduct security assessments, vulnerability analyses, and provide actionable feedback on system designs and new implementations

About you

• Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered

• 5+ years of experience in a dedicated security role, with a strong focus on incident response, security operations, or threat hunting

• Proven experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, QRadar, Elastic, Microsoft Sentinel)

• In-depth understanding of network protocols, operating systems (Windows, Linux), and common attack vectors

• Hands-on experience with endpoint detection and response (EDR) solutions

• Strong analytical and problem-solving skills, with the ability to quickly assess complex situations and make sound decisions

• Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences

• Ability to work independently and as part of a team in a fast-paced, dynamic environment

• Relevant industry certifications (e.g., CISSP, GCIH, GCFA, GNFA, OSCP, CEH) preferred

• Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis preferred