Lead SOC Incident Commander & Threat Hunter

UKG; United States; On-site; USD 145,600 - 209,300; Full time

Benefits offered by this job

Performance-based bonus

Restricted stock units (RSUs)

Job summary

UKG is seeking a Senior Staff SOC Analyst to join the Global Security Operations team. You will lead incident response, digital forensics, and threat hunting across endpoints, cloud, and workloads, coordinating major incidents and mentoring junior staff.

Strong scripting and GenAI-enabled investigation work are expected. You will collaborate with Legal, Privacy, and business stakeholders, translating findings into executive-ready summaries and durable detections to improve overall security

Qualifications

• 5+ years of direct hands-on digital forensics and incident response experience.
• Experience leading or supporting major cyber incident command and coordination.
• Hands-on threat hunting across SIEM, EDR, cloud telemetry, networks, and endpoints.
• Strong scripting skills in Python, PowerShell, or Bash for automation.
• Ability to mentor, train, and influence technical analysts.
• Experience applying GenAI-assisted workflows to investigations and hunt development.
• Knowledge of forensic collection standards and executive-ready reporting.
• Experience with one or more major cloud providers.

Responsibilities

• Provide hands-on digital forensics and incident response across endpoints, cloud, and networks.
• Lead major incident command activities: coordinating response, tracking actions, and briefing stakeholders.
• Perform threat hunting across SIEM, EDR, cloud, identity, and network sources.
• Support and lead complex investigations as a technical contributor across SOC teams.
• Mentor analysts during incidents, post-incident reviews, and exercises.
• Develop incident strategies, timelines, and technical summaries for leadership.
• Create training materials, playbooks, and exercises for command and response.
• Utilize scripting to accelerate investigations and standardize responses.

Skills

Digital forensics

Incident response

Threat hunting

Scripting (Python/PowerShell/Bash)

Leadership / mentoring

Forensic artifacts knowledge

GenAI-assisted workflows

Executive communication

Tools

SIEM

EDR

SOAR

Cloud telemetry tools

Job description

UKG is seeking a Senior Staff SOC Analyst to join the Global Security Operations team. You will lead incident response, digital forensics, and threat hunting across endpoints, cloud, and workloads, coordinating major incidents and mentoring junior staff.

Strong scripting and GenAI-enabled investigation work are expected. You will collaborate with Legal, Privacy, and business stakeholders, translating findings into executive-ready summaries and durable detections to improve overall security