Exabeam Engineer

Accrescent Group; Dallas (TX); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Accrescent Group is seeking a Senior SOC Analyst to lead onshore security operations, focusing on Exabeam SIEM/UEBA, incident response, and threat hunting in a customer‑facing role. You will drive detections, response, and improvements across the client environment.

The role requires hands‑on Exabeam experience, strong incident leadership, and collaboration with cross‑functional teams to map activity to MITRE ATT&CK and deliver actionable security metrics.

Qualifications

• Minimum 4 years of core SOC experience.
• Mandatory hands-on experience with Exabeam SIEM and UEBA.
• Strong experience in Security Monitoring, Incident Response, Threat Hunting, Detection Engineering, and Log Analysis.
• Familiarity with MITRE ATT&CK framework and IOC/IOA analysis.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents using Exabeam SIEM and UEBA.
• Lead advanced incident investigations, including root cause analysis, containment, eradication, recovery, and post‑incident reviews.
• Serve as the primary SOC point of contact for the customer and represent SOC operations in day‑to‑day engagements.
• Act as the Incident Responder and Commander during high‑priority security incidents, coordinating response activities across teams.
• Develop, tune, and optimize Exabeam correlation rules, analytics use cases, dashboards, and detection content.
• Conduct proactive threat hunting leveraging telemetry, UEBA insights, and threat intelligence.
• Leverage Anomali threat intelligence to enrich investigations and improve detection.
• Map detections/investigations to the MITRE ATT&CK framework.
• Collaborate with onshore and offshore SOC teams, and with infrastructure, network, cloud, and application teams.
• Produce executive and technical incident reports, threat trend analysis, and operational metrics.

Skills

Exabeam SIEM

UEBA

Security Monitoring

Incident Response

Threat Hunting

Detection Engineering

Log Analysis

MITRE ATT&CK

IOC/IOA Analysis

Root Cause Analysis

Customer Facing

Tools

Anomali

Job description

Job Description

• Work Arrangement: Hybrid –Dallas, Texas Remote is not available
• Exabeam: Mandatory – strong hands‑on Exabeam engineering and operations experience is required.

We are seeking a Senior SOC Analyst / Lead SOC Analyst with strong hands‑on expertise in Exabeam SIEM and UEBA to serve as the primary onshore Security Operations resource supporting a strategic customer environment. This individual will lead advanced incident investigations, threat hunting, detection engineering, and incident response activities while acting as the day‑to‑day SOC representative for the customer.

The ideal candidate will be comfortable operating in a customer‑facing role, engaging directly with the customer's CISO organization, leading critical security incidents, and driving improvements across detection and response capabilities.

Key Responsibilities

• Monitor, investigate, and respond to security alerts and incidents using Exabeam SIEM and UEBA.
• Lead advanced incident investigations, including root cause analysis, containment, eradication, recovery, and post‑incident reviews.
• Serve as the primary SOC point of contact for the customer and represent SOC operations in day‑to‑day engagements.
• Act as the Incident Responder and Commander during high‑priority security incidents, coordinating response activities across multiple teams.
• Develop, tune, and optimize Exabeam correlation rules, behavioral analytics use cases, dashboards, and detection content.
• Conduct proactive threat hunting activities leveraging security telemetry, UEBA insights, and threat intelligence.
• Leverage Anomali threat intelligence to enrich investigations and improve detection effectiveness.
• Map detections and investigations to the MITRE ATT&CK framework.
• Collaborate with onshore and offshore SOC teams, as well as infrastructure, network, cloud, and application teams.
• Produce executive and technical incident reports, threat trend analysis, and operational metrics.

Required Skills & Experience

• Minimum 4 years of core SOC experience.
• Mandatory hands‑on experience with Exabeam SIEM and UEBA.
• Strong experience in:
  • Security Monitoring & Incident Response
  • Threat Hunting
  • Detection Engineering
  • Security Event Correlation & Log Analysis
  • Threat Intelligence Operations
  • MITRE ATT&CK Framework
  • IOC/IOA Analysis
  • Root Cause Analysis
• Experience with:
  • Must have: Exabeam
  • Good to have: Anomali