Hybrid Senior SOC Threat Hunter and Incident Lead

WPS Health Solutions; Monona (WI); Híbrido; USD 125 000 - 160 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote and hybrid options

Bonus potential

401(k) match

Health insurance

Resumo da oferta

WPS Health Solutions is seeking a Principal, Security Operations Center (SOC) Analyst who will lead detection, investigation, and response to cyber threats across government and commercial environments.

This senior role focuses on threat-informed detections, SIEM modernization, threat hunting, and automation, with mentorship for SOC analysts and collaboration with CTM and other teams. Hybrid work within Wisconsin is supported.

Qualificações

• Bachelor’s degree in computer science, cybersecurity, IT, or related field, or equivalent experience.
• 7+ years in cybersecurity with 5+ years in security operations, incident response, or detection engineering.
• Strong experience with SIEM operations, MITRE ATT&CK-based detections, and governance.

Responsabilidades

• Design threat-informed detections mapped to MITRE ATT&CK across identity, endpoint, email, network, cloud.
• Lead major incidents from detection through recovery; maintain incident response playbooks.
• Architect SOC monitoring and detection architecture; govern log sources and data quality.
• Conduct threat hunting and operationalize threat intelligence to prioritize detections.

Conhecimentos

Threat hunting

SIEM

MITRE ATT&CK

Incident response

Threat intelligence

Automation

PowerShell

Python

Cloud security

Log analytics

Communication

Formação académica

Bachelor's degree in a related field

Equivalent education/experience

Ferramentas

Sentinel/KQL

Splunk SPL

Microsoft Defender XDR

CrowdStrike Falcon

Descrição da oferta de emprego

WPS Health Solutions is seeking a Principal, Security Operations Center (SOC) Analyst who will lead detection, investigation, and response to cyber threats across government and commercial environments.

This senior role focuses on threat-informed detections, SIEM modernization, threat hunting, and automation, with mentorship for SOC analysts and collaboration with CTM and other teams. Hybrid work within Wisconsin is supported.