On-Site Senior SOC Analyst: Threat Hunter & Automation Lead

Core Specialty Insurance Holdings, Inc.; Cincinnati (OH); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Comprehensive benefits including 401(k

Wellness program

Job summary

Core Specialty Insurance Holdings, Inc. is seeking a Senior SOC Analyst (Level 2/3) to join the Security Operations Center in Cincinnati or Dallas. This on-site role focuses on advanced threat detection, incident analysis, and escalation for L1 analysts in a fast-paced 24x7 environment.

You will mentor junior staff, lead investigations, tune SIEM/EDR detection logic, develop automation workflows, and contribute to incident reports and playbooks to strengthen defenses.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or equivalent practical experience.
• 3+ years of experience in SOC operations, cybersecurity, or incident response.
• Certifications such as GCIH, GCIA, CEH, CySA+, or CISSP are preferred.

Responsibilities

• Investigate escalated alerts, validate threats, and perform deep-dive forensic analysis using SIEM, EDR, and threat intelligence tools.
• Lead containment and remediation for escalated incidents across multiple environments.
• Develop and tune SIEM use cases, correlation rules, and EDR detection logic to improve SOC efficiency.
• Design and implement automation workflows to enhance incident response and investigation efforts.
• Leverage AI platforms to assist with automation of SOC processes.
• Conduct proactive hunts leveraging behavioral analytics and intelligence feeds to identify emerging threats.
• Maintain and enhance SOC playbooks, runbooks, and SOPs.
• Produce high-quality incident timelines and detailed reports with root cause analyses.

Skills

SOC operations

Incident response

Security automation

Python scripting

PowerShell scripting

SQL/KQL

Communication & documentation

MITRE ATT&CK knowledge

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

SIEM

EDR

Threat intelligence platforms

Cloud security monitoring (AWS/Azure/GCP)

Job description

Core Specialty Insurance Holdings, Inc. is seeking a Senior SOC Analyst (Level 2/3) to join the Security Operations Center in Cincinnati or Dallas. This on-site role focuses on advanced threat detection, incident analysis, and escalation for L1 analysts in a fast-paced 24x7 environment.

You will mentor junior staff, lead investigations, tune SIEM/EDR detection logic, develop automation workflows, and contribute to incident reports and playbooks to strengthen defenses.