Senior SOC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior SOC Analyst leading high-severity investigations, threat hunting, malware analysis, and forensics. Strengthening detection and response for DeepSeas’ global cybersecurity clients.
Responsibilities:
- Lead and mentor L1 and L2 incident responders
- Coordinate with internal and external stakeholders during high-severity incidents
- Develop, refine, and test incident response playbooks and procedures
- Conduct advanced threat hunting
- Collaborate with threat intelligence and vulnerability management teams
- Provide guidance on root cause analysis and post-incident reviews
- Develop and tune detection rules
- Apply MITRE ATT&CK to categorize threat actor tactics, techniques, and procedures
- Drive continuous improvement within the SOC
- Generate leadership metrics and reports on incident response activities and trends
- Brief leadership on security incidents and trends
- Develop and maintain automation scripts for incident response
- Conduct in-depth malware analysis
- Correlate malware findings with threat actor campaigns
- Recommend detection and prevention improvements
- Lead digital forensics investigations, including memory forensics
- Oversee network forensics activities
- Serve as a subject matter expert for DeepSeas and client leadership
Requirements:
- 5+ years of experience in security operations, incident response, or threat detection, including senior (L3) or investigation-lead experience; or equivalent combination of education and experience
- Experience leading high-severity incident response through containment, eradication, and recovery
- Proficiency with SIEM, EDR/XDR, and SOAR platforms
- Experience writing and tuning detection content, including KQL, SPL, Sigma, and YARA
- Working knowledge of MITRE ATT&CK and the incident response lifecycle, including NIST SP 800-61
- Experience with host, memory, and network forensics
- Experience with static and dynamic malware analysis
- Scripting proficiency in Python, PowerShell, or Bash
- Experience mentoring or leading junior analysts
- Strong written and verbal communication skills for technical, executive, and client audiences
- Must be a U.S. citizen currently residing within the United States
- Preferred: GCIH, GCFA, GREM, GNFA, OSCP, or CISSP
- Preferred: MDR or MSSP experience supporting multiple clients
- Preferred: reverse engineering and memory forensics tools such as Ghidra, IDA Pro, x64dbg, and Volatility
- Preferred: threat-hunting or detection engineering program experience
- Preferred: Bachelor's degree in Cybersecurity, Computer Science, or related field
Benefits:
- Supportive crew of teammates and opportunities for growth
- Personal health and well-being prioritized
- Diversity-focused workplace
- Information security participation and awareness
- Random background/drug screens may be performed for data security
Similar Jobs
SOC Analyst, SIEM Engineer
SOC Analyst/SIEM Engineer monitoring and improving security systems for secupay AG, a German omnichannel payments provider. Investigating incidents and optimizing FortiSIEM detection capabilities.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across client environments for Workstreet’s managed security and compliance services. Tuning detections, guiding remediation, and supporting 24x7 SOC coverage.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across EDR, SIEM, firewall, IPS, and WAF platforms. Providing actionable incident findings and remediation guidance for Workstreet’s cybersecurity and compliance clients.
Security Operations AI Engineer – Contract
Security Operations AI Engineer securing enterprise AI/ML systems for 66degrees, an AI transformation partner. Building detection pipelines, incident playbooks, and governance controls for emerging AI threats.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing managed security services for Axians Switzerland. Analyzing cyberthreats and operating Microsoft Azure and M365 security environments.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss customers. Analyzing cyber threats across Microsoft 365 and Azure environments.
Security Operations Engineer, Microsoft Solutions
Security Operations Engineer operating managed security services across Microsoft 365 and Azure. Analyzing cyber threats and delivering security projects for Axians Schweiz’s digital transformation clients.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss cloud and IT customers. Analyzing cyberthreats and delivering Microsoft security projects.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating Axians Switzerland’s managed security services. Analyzing cyberthreats and implementing Microsoft-focused security projects across Azure and M365 environments.
SOC Analyst
Information Security & Compliance Analyst maintaining SOC 2, ISO 27001 and Cyber Essentials readiness for SyncEzy’s B2B SaaS integration platform. Owning evidence, controls, risks and audit coordination remotely.
Director, Security Operations Center
Director leading Thrive’s Security Operations Center for cloud, cybersecurity, networking, disaster recovery, and managed services. Overseeing SOC operations, incident response, threat monitoring, and analyst teams.
SOC Analyst
SOC Analyst monitoring security alerts and resolving incidents for Leadtech’s global digital products. Improving vulnerability management and security processes across cross-functional teams.
Global IT Security Operations Lead – Exposure Management
Global security operations leader building incident response, detection, and exposure management capabilities. Protecting aerospace intellectual property, manufacturing uptime, and hybrid IT environments.
Security Operations Associate
Security Operations Associate supporting Everbridge’s critical event management technology. Coordinating secure journey services, security assistance, vendors, client communications, and operational records.
Security Incident Response Manager – Abuse Operations
Stripe Security Incident Response Manager investigating fraud and abuse across its financial infrastructure platform. Leading incident response, mitigation, automation, and cross-functional security improvements.
Senior SOC Analyst
Senior SOC Analyst investigating and resolving OT security incidents for ABB’s industrial technology solutions. Performing forensic analysis, improving threat detection, and automating SOC processes.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer bei Axians Schweiz für Microsoft Cloud- und Managed-Security-Umgebungen. Implementierung, Betrieb und Weiterentwicklung von Managed Security Services sowie Analyse von Cyberbedrohungen.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating managed security services for Axians Switzerland’s Microsoft cloud and IT environments. Analyzing cyberthreats and implementing security projects.
Security Engineer III – Security Operations
Security Engineer detecting, investigating, and responding to threats across Primer's global payments infrastructure. Building Elastic, AWS, Python, and Terraform security operations automation.
Director of Security Operations
Director of Security Operations leading Backblaze’s cybersecurity monitoring, incident response, and vulnerability programs. Driving AI-assisted defenses, automation, and operational resilience across cloud and distributed environments.