> Markdown version of [/jobs/ext/3971633-l3-soc-analyst](https://www.wearedevelopers.com/jobs/ext/3971633-l3-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# L3 SOC ANALYST

- **Company:** Inchcape LLC
- **Location:** Denver, CO, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Active Directory, Authentication Protocols, Cloud Computing, Cloud Computing Security, Cyber Security, Monitoring of Systems, Identity and Access Management, Intrusion Detection and Prevention, Network Security, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Cybercrime, Security Orchestration, Automation & Response
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/l3-soc-analyst-denver-co--3ee49be0-3b76-4fd3-ba09-2ca562644280

## About the Role

Analysis Skills, International Business, Business Growth, Team Player, Leading Edge Technology, Technical Leadership, Analysis Skills, Process Improvement, Incident Response, Hunting, Our Security platform is seeking a L3 SOC ANALYST to join our team. This role will lead the investigation and response to complex cybersecurity incidents, act as the highest technical escalation point, and drive improvements across threat detection, incident response, threat hunting, and security automation. The ideal candidate will have strong expertise in SIEM, EDR, cloud and network security, along with hands-on experience developing detection rules, SOAR workflows, and proactive threat-hunting initiatives in a mature SOC environment. Strong technical leadership, problem-solving skills, and a passion for advancing cybersecurity operations are essential for success in this role., * 4-5+ years of hands-on SOC experience, including senior-level work in Incident Response, Threat Hunting, or Detection Engineering.

 * Deep expertise in SIEM, EDR, SOAR, Cloud Security, Identity Security, Endpoint Security, Email Security, and enterprise monitoring platforms.
 * Proven experience leading the investigation and response to major cybersecurity incidents in complex environments.
 * Strong detection engineering skills, including creating, tuning, and optimizing detection rules, behavioral analytics, and monitoring content.
 * Practical experience with threat hunting methodologies, threat intelligence, and frameworks such as MITRE ATT&CK.
 * Strong knowledge of operating systems, networking, Active Directory, Entra ID, cloud technologies, authentication protocols, and enterprise infrastructure.
 * Excellent communication and leadership skills, with the ability to mentor analysts, manage high-pressure incidents, and clearly communicate technical findings to both technical and non-technical stakeholders.

## Description

* Lead the investigation and response to complex and high-severity cybersecurity incidents, acting as the senior technical escalation point within the SOC.
 * Coordinate containment, eradication, and recovery activities during major security incidents while collaborating with internal and external stakeholders.
 * Develop and enhance detection rules, threat models, and monitoring capabilities across SIEM, EDR, cloud, identity, network, and endpoint security platforms.
 * Perform proactive threat hunting to identify advanced threats, detection gaps, and opportunities to strengthen security monitoring.
 * Build and optimize SOAR playbooks, automations, and integrations to improve efficiency and accelerate incident response.
 * Conduct deep technical investigations to determine attack paths, root causes, and business impact across enterprise environments.
 * Mentor junior SOC analysts (L1/L2), contribute to SOC strategy and continuous improvement initiatives, and participate in on-call escalations when required.