Lead SOC Analyst: Incident Response & Threat Hunting

Kforce Inc; Irving (TX); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Life and disability insurance

Job summary

Kforce Inc in Irving, TX is seeking a Senior SOC Analyst to lead complex cybersecurity incidents and drive improvements across detection, response, and forensics. The role focuses on incident leadership, threat intelligence, and cross-team collaboration to strengthen security controls.

You will mentor junior analysts, develop incident response playbooks, and communicate findings to both technical and business stakeholders.

Qualifications

• 6+ years in cybersecurity, including security operations, IR, threat hunting or related areas.
• Demonstrated experience leading complex or high-severity security incidents.
• Strong experience with SIEM, EDR, threat detection and IR technologies.
• Knowledge of Windows, Linux, identity, network, and cloud security concepts.
• Hands-on experience with digital forensics, security investigations, and malware analysis.
• Experience developing detection queries, rules, and automated security workflows.
• Proficiency with scripting/automation using Python, PowerShell, or similar.
• Familiarity with MITRE ATT&CK and NIST frameworks.
• Strong analytical, troubleshooting, communication and leadership skills.
• Ability to mentor analysts and communicate technical findings to diverse audiences.

Responsibilities

• Lead response to complex cybersecurity incidents, including investigation, containment and root-cause analysis.
• Conduct advanced threat hunting, digital forensics, malware analysis, and security investigations.
• Develop and improve security detections, automated response workflows, and monitoring capabilities.
• Analyze threat intelligence to identify risks and strengthen controls.
• Partner with security, infra, cloud, and tech teams to improve logging and incident response.
• Serve as senior escalation point and mentor security analysts.
• Develop incident response playbooks, procedures, and security documentation.
• Lead post-incident reviews, security exercises and continuous improvement initiatives.
• Communicate findings, risks, and recommendations to technical and business stakeholders.

Skills

Cybersecurity experience

Incident response leadership

SIEM/EDR expertise

Windows/Linux/Cloud security

Digital forensics & malware analysis

Detection queries & automated flows

Scripting/Automation (Python/PowerShel

MITRE ATT&CK/NIST knowledge

Leadership & mentoring

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk

Cortex

ServiceNow

Jira

Job description

Kforce Inc in Irving, TX is seeking a Senior SOC Analyst to lead complex cybersecurity incidents and drive improvements across detection, response, and forensics. The role focuses on incident leadership, threat intelligence, and cross-team collaboration to strengthen security controls.

You will mentor junior analysts, develop incident response playbooks, and communicate findings to both technical and business stakeholders.