Senior SOC Analyst

Magna5; Fully; Remote; CHF 100,000 - 150,000; Full time

Benefits offered by this job

100% remote work

Paid time off incl. holidays

Medical, dental, vision benefits

401(k) with employer match

Life and disability insurance

Certification reimbursement

Monthly stipend for mobile and data

Job summary

Magna5 seeks a Senior SOC Analyst to lead threat detection, incident response, and continuous monitoring of our security infrastructure. You will mentor junior analysts and optimize SOC processes while collaborating with cross-functional teams to enhance our cybersecurity posture.

The role emphasizes real-time monitoring, alert analysis, and proactive threat hunting across SIEM and EDR tools, with a focus on Azure/Microsoft365 security and MITRE ATT&CK techniques.

Qualifications

• Associate or bachelor’s degree or equivalent in IT, CS, Sys Admin or Cybersecurity.
• 5+ years in a Security Operations Center (SOC).
• Strong expertise with SIEM tools (e.g., Microsoft Sentinel, Secronix).
• Proficiency in EDR tools (CrowdStrike, SentinelOne, Microsoft Defender).
• Strong expertise in Cloud Security (Azure/Microsoft365).
• Familiarity with MITRE ATT&CK, PowerShell, Command Prompt, WMIC, scheduled tasks, Lateral Movement, Persistence, Defense Evasion.

Responsibilities

• Lead and support SOC operations with real-time monitoring and incident response.
• Investigate security events and perform root-cause analysis with mitigations.
• Develop, refine, and maintain detection rules, playbooks, and procedures.
• Perform advanced threat hunting using SIEM, EDR, and related tools.
• Coordinate incident response and act as escalation point for complex incidents.
• Mentor and train junior SOC analysts to improve investigations.
• Handle escalations from junior analysts and drive incident resolution.
• Conduct in-depth alert analysis and identify tuning opportunities.

Skills

SOC operations

SIEM tooling

EDR tooling

Cloud security

Education

Bachelor/Assoc degree in IT, CS, Sys Admin or Cybersecurity

Tools

Microsoft Sentinel

Secronix

CrowdStrike

SentinelOne

Microsoft Defender

Azure

Microsoft 365

Job description

Description

This position is fully remote. Must be eligible to work in the United States.

About The Role

The Senior SOC Analyst will be responsible for leading threat detection, incident response, and continuous monitoring of our security infrastructure. This role involves mentoring junior analysts, optimizing SOC processes, and collaborating with cross-functional teams to enhance our cybersecurity posture.

Senior SOC Analyst responsibilities

• Lead and support SOC operations, including real-time monitoring, threat analysis, and incident response.
• Investigate security events, conduct root cause analysis, and recommend mitigation strategies.
• Develop and refine security detection rules, playbooks, and procedures.
• Perform advanced threat hunting and proactive threat analysis using SIEM, EDR, and other security tools.
• Act as an escalation point for complex security incidents and coordinate incident response efforts.
• Provide mentorship and training to junior SOC analysts to enhance their investigative skills.
• Handle escalations from junior analysts
• Responsible for conducting in-depth analysis of alert
• Discover and hunt for tunning opportunities

Requirements

• An associate\bachelor’s degree or equivalent experience in Information Technology, Computer Science, System Administration or Cybersecurity
• 5+ years in a Security Operations Center (SOC)
• Strong expertise with SIEM tools (e.g, Microsoft Sentinel, Secronix)
• Proficiency in endpoint detection & response (EDR) tools (e.g., CrowdStrike, SentinelOne, Microsoft Defender).
• Strong expertise in Cloud Security (Azure/Microsoft365)
• Familiarity with Threat Actor Methods: (MITRE ATT&CK Framework, PowerShell, Command Prompt, WMIC, Scheduled Tasks, Windows Domain and Host Enumeration Techniques, Lateral Movement Techniques, Persistence Mechanisms, Defense Evasion Techniques)
• Proven experience on platforms such as HackTheBox, TryHackMe, etc.

Preferred Qualifications

• 5+ years of experience with SentinelOne or CrowdStrike
• 5+ years of experience with a SIEM (e.g, Microsoft Sentinel, Secronix)
• 5+ year of experience on platforms such as HackTheBox, TryHackMe, etc.
• 5+ years of experience with incident response/Management
• 5+ years of experience with Cloud Security (Azure/Microsoft365) and handling business email compromises (BEC)

Hours & Schedule

This position is primarily business hours (Monday-Friday 8am – 5pm EST) with occasional after-hours work for incidents. All engineers are part of an on-call rotation and may be escalated issues off hours.

Work Perks

• 100% permanently remote position with no plans to return to an office
• Paid time off including paid holidays and float holidays
• Highly competitive and flexible medical, dental, and vision benefits plans to suit your needs
• 401(k) with employer match
• Tailored Life and Disability insurance plans
• Full reimbursement for approved professional certification and career enriching opportunities
• Monthly mobile phone plan and internet service stipend

What We Do

Magna5 is a rapidly growing IT Managed Service Provider delivering cybersecurity, private and public cloud hosting, backup and disaster recovery and other advanced services from mid-market to enterprise customers nationwide, including leaders within the education, healthcare, government, financial services, manufacturing, and other industry segments. We integrate advancements in technology and processes to drive businesses forward. As a trusted managed services provider, we bring together the right mix of managed IT services, security, and network connectivity, fully managed by our team of experts 24/7/365. Our passion is to help companies function better, faster, and smarter. We offer an exciting and collaborative environment, with growth potential. For more information, visit our website at https://www.magna5.com/