> Markdown version of [/jobs/ext/546291-lead-software-engineer](https://www.wearedevelopers.com/jobs/ext/546291-lead-software-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Software Engineer - **Company:** Generative Ai - **Location:** Denver, CO, United States (Remote available) - **Experience:** Expert - **Salary:** $166,400.0 - $187,200.0 - **Contract:** Temporary to permanent - **Skills:** Artificial Intelligence, Microsoft Azure, Cyber Security, DevOps, Microsoft Security Essentials, Parsing, Reliability Engineering, Security Information and Event Management, Microsoft Power Automate, Gitlab, Microsoft Sentinel - **Published:** June 15, 2026 - **Apply:** https://mondo.gosnaphop.com/jobs/job/soc-analyst-denver-co-80218-32426882/13559f52-6447-11f1-a639-02420a6c7775 ## About the Role * Senior-level Security Analyst experience with a blend of security operations and security engineering * Hands-on experience deploying and administering Microsoft Sentinel * Experience leading incident investigations and coordinating response efforts at enterprise scale * Proven track record creating security automation playbooks and response workflows * Strong background tuning detections, alerts, and correlation rules * Experience supporting environments with 35,000 users or similarly large organizations * Deep expertise in the Microsoft security ecosystem, including Azure, Microsoft Defender Suite, and related services * Experience leveraging AI-enabled security tools, including Microsoft Copilot for Security * Strong communication skills with the ability to engage directly with end users and non-technical stakeholders * Familiarity with HIPAA and regulated/healthcare environments Preferred Qualifications: * Experience with CrowdStrike or other enterprise EDR platforms * Background assessing security programs and providing strategic improvement recommendations * Experience with security operations automation, orchestration, and response best practices, * Senior-level Security Analyst experience with a blend of security operations and security engineering * Hands-on experience deploying and administering Microsoft Sentinel * Experience leading incident investigations and coordinating response efforts at enterprise scale * Proven track record creating security automation playbooks and response workflows * Strong background tuning detections, alerts, and correlation rules * Experience supporting environments with 35,000 users or similarly large organizations * Deep expertise in the Microsoft security ecosystem, including Azure, Microsoft Defender Suite, and related services * Experience leveraging AI-enabled security tools, including Microsoft Copilot for Security * Strong communication skills with the ability to engage directly with end users and non-technical stakeholders * Familiarity with HIPAA and regulated/healthcare environments, * Experience with CrowdStrike or other enterprise EDR platforms * Background assessing security programs and providing strategic improvement recommendations * Experience with security operations automation, orchestration, and response best practices ## Description Job Description: Our client is seeking a Lead Security Analyst to serve as a technical leader within their Security Operations Center, supporting a large enterprise healthcare environment. This role blends hands-on security engineering with incident command responsibilities, requiring someone equally comfortable responding to active threats and advising on long-term security posture improvements. The ideal candidate brings strong judgment, clear communication skills, and the ability to engage directly with end users and stakeholders across the organization. Day-to-Day Responsibilities: * Lead cyber incident triage and response, determining scope, urgency, and next steps through resolution or escalation * Serve as incident commander during major security events, coordinating response efforts and communicating with stakeholders * Design, tune, and maintain detection logic, correlation rules, dashboards, and alerts within Microsoft Sentinel and the broader Microsoft security stack * Lead and participate in proactive threat hunting activities to identify indicators of compromise before incidents occur * Develop and maintain security automation playbooks and SOAR workflows to improve response speed and consistency * Support onboarding, parsing, and normalization of log sources into the SIEM * Write and maintain incident response playbooks, runbooks, and SOPs * Mentor and support SOC analysts, promoting a culture of continuous improvement * Participate in after-hours on-call rotation on a monthly basis * Partner with Infrastructure, Compliance, and Operations teams on security initiatives ## Related Videos - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [From Syntax to Singularity: AI’s Impact on Developer Roles](https://www.wearedevelopers.com/videos/900-from-syntax-to-singularity-ai-s-impact-on-developer-roles) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [Inside the AI Revolution: How Microsoft is Empowering the World to Achieve More](https://www.wearedevelopers.com/videos/869-inside-the-ai-revolution-how-microsoft-is-empowering-the-world-to-achieve-more) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)