SOC Analyst

We have a permanent role for a US Citizen or GC onsite in Westlake, TX (Dallas area) for a SOC Analyst with Exabeam SIEM and UEBA. Also experience writing queries and use cases. Also looking for experience in Security monitoring and incident response, threat hunting, detection engineering,, security event correlation & log analysis, threat intelligent operations, MITRE ATT&CK Framework, IOC/IOA Analysis, Root Cause Analysis and Exabeam. Also good customer interfacing. We are seeking a Senior SOC Analyst / Lead SOC Analyst with strong hands-on expertise in Exabeam SIEM and UEBA to serve as the primary onshore Security Operations resource supporting a strategic customer environment. Experience writing queries / Expert in use cases. We DON’T NEED a engineer or Administrator (needs to be a SOC Analyst), Monitor, investigate, and respond to security alerts and incidents using Exabeam SIEM and UEBA. Lead advanced incident investigations, including root cause analysis, containment, eradication, recovery, and post-incident reviews. Serve as the primary SOC point of contact for the customer and represent SOC operations in day-to-day engagements. Act as the Incident Responder and Commander during high-priority security incidents, coordinating response activities across multiple teams. Develop, tune, and optimize Exabeam correlation rules, behavioral analytics use cases, dashboards, and detection content. Conduct proactive threat hunting activities leveraging security telemetry, UEBA insights, and threat intelligence. Leverage Anomali threat intelligence to enrich investigations and improve detection effectiveness. Map detections and investigations to the MITRE ATT&CK framework. Collaborate with onshore and offshore SOC teams, as well as infrastructure, network, cloud, and application teams. Produce executive and technical incident reports, threat trend analysis, and operational metrics. Stakeholder & Leadership Expectations Act as the face of the SOC for the customer during U.S. business hours. Build strong working relationships with customer security leadership and operational teams. Provide regular operational updates and incident briefings directly to the customer’s CISO organization. Lead incident communications and drive coordination during major cyber security events. Minimum 4 years of hands-on SOC experience in an enterprise environment. Strong hands-on experience with Exabeam SIEM and UEBA (not just exposure or administration). Experience performing advanced incident investigations and acting as a lead responder during security incidents. Experience with threat hunting, detection engineering, and SIEM content/rule tuning. Comfortable serving as a customer-facing SOC representative and communicating with senior security stakeholders. END OF JOB DESCRIPTION Validation Checks before sharing for screening: Before sharing profiles, please validate candidates against the following mandatory criteria, Position: OT Security Analyst Location: Dallas, TXOnsite Duration: 1 Year Oversee SOC operations during assigned shifts, ensuring efficient workflow, proper escalation …

• 18 hours ago
• Apply easily, Role: Network Operations Center (NOC) Analyst / Engineer Location: Dallas, TX 75252 (onsite, locals only) Duration: 12 months Pay Rate: $37-$39 W2 This position is in Dallas, …
• 14 days ago +

Minimum 4 years of core SOC experience. Mandatory hands-on experience with Exabeam SIEM and UEBA. Strong experience in: o Security Monitoring & Incident Response o Threat Hunting o Detection Engineering o Experience in USe Cases and writing queries o Security Event Correlation & Log Analysis o Threat Intelligence Operations o MITRE ATT&CK Framework o IOC/IOA Analysis o Root Cause Analysis Experience with: o Must have: Exabeam o Good to have: Anomali Preferred Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline. Experience supporting large enterprise / public sector environments. Relevant certifications. This individual will lead advanced incident investigations, threat hunting, detection engineering, and incident response activities while acting as the day-to-day SOC representative for the customer. The ideal candidate will be comfortable operating in a customer-facing role, engaging directly with the customer’s CISO organization, leading critical security incidents, and driving improvements across detection and response capabilities., U.S. Citizen or GC Minimum 4 years of hands-on SOC experience in an enterprise environment. Strong hands-on experience with Exabeam SIEM and UEBA (not just exposure or administration). Experience performing advanced incident investigations and acting as a lead responder during security incidents. Experience with threat hunting, detection engineering, and SIEM content/rule tuning. Comfortable serving as a customer-facing SOC representative and communicating with senior security stakeholders. Willing to work onsite in Westlake, TX during U.S. business hours. Willing to participate in on-call rotations and travel to the customer site during high-priority incidents. Please provide the following information with each submission:

1. Total SOC experience.
2. Years of hands-on Exabeam experience.
3. Specific Exabeam activities performed (monitoring, investigations, content development, UEBA, rule tuning, threat hunting).
4. Experience acting as Incident Responder/Incident Commander.
5. Customer-facing or executive-facing experience.
6. Current location and willingness to work onsite in Westlake, TX.

This role is now contract to hire (was perm but they are allowing for a contract to hire now) Might be 3-6 mo contract then will go perm Its like a SOC Engineer or Lead SOC Analyst (not a regular they’re all not strong enough and haven’t been able to answer questions so more of a solid candidate MUST HAVE EXABEAM EXPERIENCE Onsite in Westlake, TX (by Dallas) ONLY send locals so not willing to relocate When it goes perm the salary willbe up to $90-100k so hourly will be about 50/w2 USC or GC only Client is Inspira Enterprises (work is with them not an end client (they support other clients but its direct with them so when it switches to perm later will be a perm employee of theres dont send candidates who are traveling because it shows location Video interview