Sr. SOC Analyst

• Minimum 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier 2/Tier 3 SOC or escalation capacity.
• CompTIA Security+ or equivalent.
• Proven experience leading incident response triage, investigation, and remediation, including working directly with MDR partners.
• In-depth knowledge of security tools and technologies, including SIEM/SOAR platforms (e.g., Microsoft Sentinel), endpoint detection and response solutions (e.g., Microsoft Defender XDR, Palo Alto Cortex XDR), and ticketing systems (e.g., ServiceNow).
• Demonstrated ability to author and tune detection content (e.g., KQL in Sentinel/Defender) and operationalize it into production.
• Experience analyzing cloud security telemetry (e.g., Azure/Entra sign-in logs, AWS CloudTrail).
• Hands-on experience building or maintaining automated playbooks and response workflows in a SOAR platform.
• Strong understanding of network security concepts, operating systems, and malware analysis techniques.
• Familiarity with the MITRE ATT&CK framework and threat intelligence platforms.
• Excellent analytical, problem-solving, and communication skills, with the ability to work under pressure and manage multiple priorities.

Preferred

• Certifications such as CISSP, GCIA, GCIH, GCFA, CySA+, eJPT/PJPT, CEH, SC-200.
• Scripting and automation skills (Python, PowerShell) for tooling, enrichment, and analysis.
• Experience supporting an EDR platform migration (e.g., Cortex XDR to Microsoft Defender XDR).
• Experience with or strong interest in AI-assisted triage and agentic SOC tooling to augment analyst workflows.
• Broader cloud security experience across AWS, Azure, and OCI.
• Experience with Microsoft Sentinel, Proofpoint, and Palo Alto Cortex XDR.