ISSO / Senior SOC analyst

SFE; United States; Remote; USD 110,000 - 190,000; Full time

Benefits offered by this job

Remote work

Job summary

SFE is seeking a Senior SOC Analyst to join a remote team in the United States. You will act as a senior escalation point for Tier 1/2 SOC analysts and lead investigations of complex security incidents across endpoints, networks, cloud, and applications.

You will coordinate containment, eradication, and recovery, while driving threat hunting, tuning detections, and root-cause analysis. You will mentor analysts, develop playbooks, and document guidance to improve SOC effectiveness.

Qualifications

• 5+ years of relevant cybersecurity/SOC experience.
• Strong hands-on experience with SIEM/XSIAM and senior-level SOC operations.
• Advanced experience in complex security incident investigation and response.
• Strong threat hunting and detection engineering experience.
• Experience with incident escalation, root-cause analysis, and remediation.
• Hands-on experience developing and improving security playbooks.
• Ability to coordinate cross-functional incident response and remediation activities.
• Experience mentoring Tier 1/Tier 2 SOC analysts and providing knowledge transfer.
• Strong understanding of security monitoring, incident response, and threat detection.
• Relevant certifications such as GCIH, GCIA, GCFE, GCDA, CISSP, or equivalent are preferred.

Responsibilities

• Serve as a senior escalation point for Tier 1 and Tier 2 SOC analysts.
• Lead investigations of complex and high-visibility security incidents.
• Analyze threats across endpoint, network, identity, cloud, application, and data environments.
• Coordinate incident containment, eradication, and recovery activities.
• Perform threat hunting, detection tuning, and root-cause analysis.
• Document incident findings, technical analysis, and remediation recommendations.
• Develop knowledge articles, training materials, and technical guidance.
• Mentor junior and peer SOC analysts and support knowledge transfer.
• Support backup/recovery and backend troubleshooting activities as required.
• Contribute to continuous improvements in SOC processes, monitoring, and detection capabilities.

Skills

SOC operations

Escalation leadership

Threat hunting

Incident response

Root-cause analysis

Playbook development

Mentoring analysts

SIEM/XSIAM

Security monitoring

Education

CISSP

GCIH

GCIA

GCFE

GCDA

Tools

Palo Alto

Fortinet

Tenable

Rapid7

Cribl

Cortex

EDR/XDR/SOAR

Job description

Job Title: Senior SOC Analyst
Location: REMOTE
Hire Type: Full time

Required Skills

• 5 8 years of relevant cybersecurity/SOC experience.
• Strong hands-on experience with SIEM/XSIAM and senior-level SOC operations.
• Advanced experience in complex security incident investigation and response.
• Strong threat hunting and detection engineering experience.
• Experience with incident escalation, root-cause analysis, and remediation.
• Hands-on experience developing and improving security playbooks.
• Ability to coordinate cross-functional incident response and remediation activities.
• Experience mentoring Tier 1/Tier 2 SOC analysts and providing knowledge transfer.
• Strong understanding of security monitoring, incident response, and threat detection.
• Relevant certifications such as GCIH, GCIA, GCFE, GCDA, CISSP, or equivalent are preferred.

Preferred Skills

• Palo Alto
• Fortinet
• Tenable
• Rapid7
• Cribl
• Cortex
• Advanced SIEM, EDR/XDR, and SOAR
• Network, identity, and cloud security
• MITRE ATT&CK and NIST frameworks
• GIAC, CISSP, or equivalent certifications

Responsibilities

• Serve as a senior escalation point for Tier 1 and Tier 2 SOC analysts.
• Lead investigations of complex and high-visibility security incidents.
• Analyze threats across endpoint, network, identity, cloud, application, and data environments.
• Coordinate incident containment, eradication, and recovery activities.
• Perform threat hunting, detection tuning, and root-cause analysis.
• Document incident findings, technical analysis, and remediation recommendations.
• Develop knowledge articles, training materials, and technical guidance.
• Mentor junior and peer SOC analysts and support knowledge transfer.
• Support backup/recovery and backend troubleshooting activities as required.
• Contribute to continuous improvements in SOC processes, monitoring, and detection capabilities.

Expected Deliverables

• Incident investigation documentation and remediation recommendations.
• Improved detection content and incident response playbooks.
• Knowledge articles and training materials.
• Documented technical guidance and escalation procedures.
• Contributions to SOC process and security monitoring improvements.
• Clearly defined measurable deliverables and acceptance criteria in coordination with the engagement team.

Candidate Submission Requirements

have the specific background and hands-on experience mentioned above, particularly:

• SIEM/XSIAM
• Senior SOC operations
• Complex incident investigation and response
• Threat hunting
• Detection engineering
• EDR/XDR/SOAR
• Incident escalation and root-cause analysis
• Security playbook development
• Palo Alto/Cortex or comparable security technologies
• MITRE ATT&CK/NIST
• Mentoring and knowledge transfer