Exabeam Engineer

We are seeking a Senior SOC Analyst / Lead SOC Analyst with strong hands-on expertise in Exabeam SIEM and UEBA to serve as the primary onshore Security Operations resource supporting a strategic customer environment. This individual will lead advanced incident investigations, threat hunting, detection engineering, and incident response activities while acting as the day-to-day SOC representative for the customer. The ideal candidate will be comfortable operating in a customer-facing role, engaging directly with the customer’s CISO organization, leading critical security incidents, and driving improvements across detection and response capabilities. Key Responsibilities

• Monitor, investigate, and respond to security alerts and incidents using Exabeam SIEM and UEBA.
• Lead advanced incident investigations, including root cause analysis, containment, eradication, recovery, and post-incident reviews.
• Serve as the primary SOC point of contact for the customer and represent SOC operations in day-to-day engagements.
• Act as the Incident Responder and Commander during high-priority security incidents, coordinating response activities across multiple teams.
• Develop, tune, and optimize Exabeam correlation rules, behavioral analytics use cases, dashboards, and detection content.
• Conduct proactive threat hunting activities leveraging security telemetry, UEBA insights, and threat intelligence.
• Leverage Anomali threat intelligence to enrich investigations and improve detection effectiveness.
• Map detections and investigations to the MITRE ATT&CK framework.
• Collaborate with onshore and offshore SOC teams, as well as infrastructure, network, cloud, and application teams.
• Produce executive and technical incident reports, threat trend analysis, and operational metrics.

• Minimum 4 years of core SOC experience.
• Mandatory hands-on experience with Exabeam SIEM and UEBA.

• Strong experience in: o Security Monitoring & Incident Response o Threat Hunting o Detection Engineering o Security Event Correlation & Log Analysis o Threat Intelligence Operations o MITRE ATT&CK Framework o IOC/IOA Analysis o Root Cause Analysis

• Experience with: o Must have: Exabeam o Good to have: Anomali