Senior Security Operations Analyst

Summary

Lead complex security investigations and incident response across endpoint, cloud, identity, and network domains using SIEM/XDR platforms. Tune detections in-flight, conduct root-cause analysis on novel events, and drive detection improvements back to the engineering team. Own SecOps metrics, define response playbooks and runbooks, and mentor analysts while building SOC capabilities from the ground up. Requires 6+ years of hands-on security operations experience, deep SIEM/XDR query language proficiency, operational EDR expertise, scripting skills in Python/PowerShell/Bash, and strong knowledge of MITRE ATT&CK frameworks.