Senior SOC Analyst (L3)

We are seeking an experienced Senior SOC Analyst (L3) to provide advanced incident response, threat hunting, detection engineering, and operational leadership across the CGS Security Operations Centre (SOC).

This role combines senior-level SOC operations with the onboarding and integration of new Operating Companies (OpCos) into the CGS SOC service. The successful candidate will act as a technical escalation point, drive continuous improvement of Microsoft security technologies, and support the standardisation of SOC processes across the organisation., * Security Operations & Incident Response

• Lead complex cybersecurity incidents from identification through containment, eradication, recovery, and post-incident review.
• Act as the primary escalation point for L1 and L2 SOC analysts.
• Perform advanced threat hunting using Microsoft Defender XDR, Microsoft Sentinel, KQL, and other telemetry sources.
• Conduct root cause analysis and recommend improvements to detection and response capabilities.
• Produce clear incident reports, threat briefings, and stakeholder communications.
• Support purple-team exercises, attack simulations, and MITRE ATT&CK-aligned threat modelling activities.
• Detection Engineering & SOC Optimisation
• Develop, tune, and maintain Sentinel analytics rules, workbooks, automation playbooks, and detection content.
• Create and optimise KQL queries to improve threat detection and investigation efficiency.
• Support automation initiatives using Logic Apps, SOAR workflows, PowerShell, and other tooling where appropriate.
• Collaborate with infrastructure, cloud, and security teams to improve telemetry quality, log onboarding, and monitoring coverage.
• Conduct quality reviews of SOC investigations, alert handling, and reporting processes.
• SOC Onboarding & Service Integration
• Support onboarding of new Operating Companies into the CGS SOC service.
• Review onboarding questionnaires, use cases, detection requirements, and security monitoring objectives.
• Coordinate with OpCo teams to migrate, test, deploy, and maintain Sentinel use cases and monitoring content.
• Align alert classifications, severity mappings, escalation procedures, and SOC workflows across CGS and OpCo environments.
• Present Defender monitoring capabilities and security recommendations for VIP accounts, critical assets, and key business systems.
• Act as a primary point of contact during onboarding activities and provide ongoing support and guidance.
• Deliver knowledge-transfer sessions and training to OpCo stakeholders and SOC personnel.

• Minimum 5 years of experience in Security Operations, Incident Response, Threat Detection, or Cyber Security.

Strong hands-on experience with:

• Microsoft Sentinel
• Microsoft Defender XDR
• Kusto Query Language (KQL)
• Incident Response
• Threat Hunting
• Detection Engineering
• Security Monitoring and Alert Triage
• Experience working within enterprise SOC environments.

Strong understanding of:

• Microsoft 365 Security
• Entra ID / Azure AD
• Windows Security
• Cloud Security Concepts
• MITRE ATT&CK Framework
• Experience working with Jira or similar ticketing and workflow management platforms.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to work effectively across geographically distributed teams., * Microsoft certifications such as SC-200, SC-300, SC-100, or AZ-500.
• Experience with PowerShell or Python automation.
• Experience with SOAR platforms and Logic Apps.
• Knowledge of threat intelligence platforms and cloud workload security., * enterprise SOC Environment: 5 years (Preferred)
• Microsoft 365 Security: 5 years (Preferred)
• Microsoft Sentinel: 5 years (Preferred)
• Microsoft Defender XDR: 5 years (Preferred)

• 401(k)
• Dental insurance
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Referral program
• Retirement plan
• Vision insurance

Application Question(s):

• What is your current work authorization status? 1. U.S. Citizen 2. Green Card (Permanent Resident) 3. H-1B Visa or 4. F-1 (OPT/CPT)

Vitaquest International is an industry-leading development and commercialization partner for consumer products in nutraceutical and functional foods. With over 40 years of history, Vitaquest has the market insight, global reach and scale of operations to support emerging and existing consumer brands from the idea to the store shelf with flawless execution in every phase. Today, Vitaquest creates and produces more than 4,000 customer formulas for more than 500 brands in over 40 countries.

Vitaquest’s employees follow an internal communications plan to encourage productivity and engagement within the organization. This is known as Vitaquest PROUD. We believe that each employee contributes directly to the organization’s growth and success. We are looking for individuals who share our innovative spirit and hope will take pride in being a part of our Company.