Cybersecurity Operations Senior Analyst

Cybersecurity Jobs; Carmel (IN); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

Life and disability coverage

401k options with company match

Three weeks PTO

Career growth opportunities

Job summary

Allied Solutions in Carmel, IN is seeking a Cybersecurity Operations Senior Analyst to lead monitoring, investigations, and incident response within the Security Operations Center onsite.

You will drive detection engineering, coordinate incident-response activities across teams, mentor analysts, and produce detailed incident reports and executive summaries.

Qualifications

• Bachelor’s degree preferred; equivalent mix of education and experience considered.
• 5–7 years of cybersecurity operations and incident response experience.
• Ability to correlate information across multiple security technologies.
• Strong written and verbal communication for technical and nontechnical audiences.

Responsibilities

• Lead monitoring and analysis of enterprise security events and telemetry.
• Coordinate incident-response activities across Security and partner teams.
• Develop detection rules and investigative queries; write reports.
• Provide mentorship and act as senior incident lead during incidents.

Skills

5-7 years of cybersecurity experience

Incident response

Threat hunting

Security operations

Education

Bachelor’s degree in cybersecurity/IT/CS or related field

Tools

SIEM

EDR

Identity

Network

Cloud

Email

Endpoint

Job description

Allied Solutions is hiring a Cybersecurity Operations Senior Analyst in Carmel, IN (onsite) to lead monitoring, investigations, and incident response activities within the Security Operations Center.

Responsibilities

• Lead advanced monitoring and analysis of enterprise security events and telemetry.
• Drive detection, identification, investigation, and escalation of potential attacks, intrusions, anomalous activity, and misuse.
• Perform proactive threat hunting using emerging threats, adversary behaviors, organizational risk, and observed trends.
• Correlate data across SIEM, EDR, identity, network, cloud, email, and other enterprise sources to uncover anomalous or malicious behavior.
• Develop, validate, tune, and maintain detection rules, investigative queries, notifications, and reporting capabilities.
• Assess detection effectiveness and recommend improvements based on investigative outcomes.
• Identify telemetry, logging, and detection gaps and propose recommendations or alternate investigative approaches.
• Lead complex cybersecurity investigations from initial detection through containment, remediation, recovery, and closure.
• Act as a senior incident lead and technical resource during cybersecurity incidents.
• Coordinate incident-response activities across Security and partner teams.
• Select investigative approaches, data sources, technical pivots, and evidence needed to support conclusions.
• Partner with analysts, infrastructure teams, application owners, and subject-matter experts to resolve incidents.
• Provide technical support during incidents as needed.
• Write and distribute detailed incident reports and after-action reviews.
• Capture lessons learned and recommend improvements to security controls, detections, telemetry, procedures, and response capabilities.
• Produce executive-level incident summaries and communicate complex findings to technical and nontechnical audiences.
• Conduct enterprise-wide research into emerging threats, vulnerabilities, adversary techniques, technologies, and defensive practices.
• Serve as a technical escalation point for SOC analysts and provide mentorship and guidance.
• Develop and maintain SOC playbooks, runbooks, procedures, investigative methodologies, and technical documentation.
• Identify opportunities to improve SOC detection coverage, investigative capabilities, operational efficiency, and response maturity.
• Lead or contribute to cross-functional cybersecurity initiatives requiring technical analysis.
• Deliver daily, periodic, trend, and executive-level reporting on security activity and emerging risk.
• Share investigative techniques, technical knowledge, and lessons learned to improve team capability.

Requirements

• 5-7 years of relevant cybersecurity experience, including security operations, security investigations, incident response, or related roles.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related discipline (preferred); an equivalent mix of education and relevant professional experience may be considered.
• Ability to analyze complex or ambiguous technical problems, determine next steps, and collaborate with relevant resources toward resolution.
• Ability to correlate information across multiple security technologies and data sources to reach defensible conclusions and recommendations.
• Working knowledge of SIEM, EDR, identity, network, endpoint and other cybersecurity technologies.
• Knowledge of security monitoring, incident response, threat hunting, detection engineering, and investigative methodologies.
• Proven teamwork skills, including providing technical guidance, accepting and incorporating feedback, and developing other analysts.
• Ability to operate in high-accountability environments with individual ownership, operational discipline, timely execution, and team success.
• Advanced certifications in areas such as incident response/DFIR, security architecture, cloud security, offensive security, detection engineering, or related disciplines (preferred, not required).
• Strong written and verbal communication skills for both technical and nontechnical audiences.

Technologies

• SIEM
• EDR
• identity
• network
• cloud
• email
• endpoint

Benefits

• Medical, dental and vision insurance coverage
• 100% company-paid life and disability coverage
• 401k options with company match
• Three weeks PTO by the end of the first year
• Career growth opportunities