Hybrid Security Operations Lead — Detection & Response

Pearson; Helena (MT); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Pearson’s Security Operations Center is seeking a Senior Security Analyst to lead day-to-day security operations, drive improvements, and advance detection engineering across Pearson environments. The role requires rapid incident response, automation, and collaboration with internal and external partners to safeguard critical assets.

You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson’s security standards and regulatory requirements.

Qualifications

• 4+ years of security operations, incident response, and detection engineering.

Responsibilities

• Lead and operate advanced SOC activities including incident detection, triage, containment, and root-cause analysis.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously improve SOC processes to align with evolving threat landscapes.
• Collaborate with threat intelligence teams to analyze risks and integrate TTPs into SOC operations.
• Act as advisor to internal stakeholders, translating technical risk into actionable insights.
• Ensure SOC activities comply with relevant standards and Pearson policies.
• Deliver executive-level reporting, risk assessments, and metrics.

Skills

SOC operations

Incident response

Threat detection

Automation

Stakeholder management

Tools

SOAR

EDR

NDR

SIEM

AWS

Azure

GCP

Job description

Pearson’s Security Operations Center is seeking a Senior Security Analyst to lead day-to-day security operations, drive improvements, and advance detection engineering across Pearson environments. The role requires rapid incident response, automation, and collaboration with internal and external partners to safeguard critical assets.

You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson’s security standards and regulatory requirements.