Senior SOC Analyst | MDR

Accountabilities: • Work as part of a 24/7 Cyber Defense team operating on rotational shifts to continuously monitor and respond to security threats across multiple environments.

• Investigate and triage advanced security alerts, determining their legitimacy, root cause, scope, business impact, and relevance while identifying evolving attack vectors.

• Correlate telemetry and alerts from SIEM platforms, EDR solutions, intrusion prevention systems, firewalls, threat intelligence sources, and other security technologies to distinguish genuine threats from false positives.

• Analyze and respond to detections affecting cloud infrastructure, services, and applications, applying appropriate investigation and response techniques across modern cloud environments.

• Provide clear recommendations for containment, mitigation, remediation, and recovery to client or internal incident response teams based on investigation findings.

• Contribute to the development, refinement, and tuning of detection rules, analytics, and security use cases to improve threat visibility and strengthen the overall defensive posture.

• Collaborate with Threat Intelligence, SOAR, and Engineering teams to enrich alerts, add contextual information, improve investigations, and enhance security operations.

• Document investigations, findings, evidence, and recommendations according to SOC procedures, reporting standards, service-level requirements, and operational quality expectations.

• Act as a subject matter expert in detection and response methodologies, including SIEM, SOAR, threat intelligence, log analysis, network telemetry, endpoint telemetry, and incident response techniques.

• Develop and maintain accurate SOC documentation, including standard operating procedures, playbooks, runbooks, investigation procedures, and other operational guidance.

• Mentor and guide junior analysts, promote continuous learning and operational excellence, and help maintain adherence to quality benchmarks and SLAs.

Requirements

• 4+ years of experience in incident response, SOC Tier 2 operations, or an equivalent security operations role is required.

• Strong understanding of adversary tradecraft and frameworks such as MITRE ATT&CK and the Cyber Kill Chain , with the ability to apply this knowledge during threat investigations.

• Deep understanding of cloud security concepts and experience investigating threats affecting cloud infrastructure, services, and applications.

• Hands-on experience with EDR, SIEM, SOAR, and security log pipelines , including the ability to correlate information across multiple telemetry sources.

• Strong knowledge of Windows, Linux, and cloud security , together with an understanding of endpoint and infrastructure security principles.

• In-depth knowledge of network protocols, endpoint artifacts, memory analysis, and log analysis , with the ability to use technical evidence to identify attack activity and root causes.

• Familiarity with scripting languages for security analysis, investigation, automation, or data processing is expected.

• Strong analytical and problem-solving skills, with the ability to investigate complex incidents, identify patterns, evaluate evidence, and make sound security decisions.

• Ability to remain calm and effective under pressure during active security incidents while working with minimal supervision and managing competing priorities.

• Excellent written and verbal communication skills, particularly when documenting technical findings and communicating security risks or recommendations to stakeholders.

• A collaborative mindset is important, along with the ability to work independently and maintain deep technical focus when conducting complex investigations.

Benefits

• $100,000–$110,000 annual salary .

• 401(k) retirement plan with an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed.

• Medical, dental, and vision insurance , available on the first day of the month following the employee's first day of employment.

• Group term life insurance , short-term disability, and long-term disability coverage.

• Access to voluntary benefits including life insurance, hospital indemnity, accident, and critical illness coverage .

• Participation in a Discretionary Time Off (DTO) program to support flexibility and work-life balance.

• 11 paid holidays annually .

• The opportunity to work within a technically advanced security operations environment focused on real-time threat detection, investigation, response, and cyber resilience.

• Exposure to modern security technologies and methodologies across SIEM, EDR, SOAR, cloud security, threat intelligence, detection engineering, and incident response .

• Opportunities to mentor other analysts, develop operational expertise, and contribute to continuous improvements in security detection and response capabilities.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1