Lead SOC Operations & Detection Engineer

Pearson; Austin (TX); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Pearson is seeking a Senior Security Analyst to lead day-to-day SOC operations across Pearson environments, driving rapid incident response and continuous improvement. The role emphasizes detection engineering, automation, and collaboration with internal and external partners to align with Pearson's security standards.

The ideal candidate will have 4+ years in security operations, hands-on experience with SOAR/EDR/NDR/SIEM, and proficiency across AWS, Azure, and GCP.

Qualifications

• Experience in regulated environments or government clients.
• 4+ years in security operations, incident response, and detection engineering.
• Hands-on with SOAR, EDR, NDR, and SIEM.
• Experience with cloud providers (AWS, Azure, GCP).
• Strong multitasking and communication skills for stakeholder management.

Responsibilities

• Lead day-to-day SOC operations, including incident detection, triage, containment and root-cause analysis.
• Develop, implement and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and governance.
• Collaborate with threat intelligence teams to analyze risks and integrate relevant TTPs.
• Provide executive-level reporting, risk assessments and metrics to demonstrate SOC effectiveness.

Skills

Security operations

Incident response

Detection engineering

Automation

Stakeholder management

Tools

SOAR

EDR

NDR

SIEM

AWS

Azure

GCP

Job description

Pearson is seeking a Senior Security Analyst to lead day-to-day SOC operations across Pearson environments, driving rapid incident response and continuous improvement. The role emphasizes detection engineering, automation, and collaboration with internal and external partners to align with Pearson's security standards.

The ideal candidate will have 4+ years in security operations, hands-on experience with SOAR/EDR/NDR/SIEM, and proficiency across AWS, Azure, and GCP.