On-Site Senior SOC Lead: Incident Command & Threat Hunting

SRI Resources; Irving (TX); On-site; USD 124,000 - 179,000; Full time

Job summary

SRI Resources is seeking a Senior SOC Analyst for an on-site, 12+ month contract in Irving, TX. You will lead incidents, conduct advanced forensics, and drive threat hunting and detection engineering.

You will mentor junior analysts and collaborate with Legal, Privacy, and IT stakeholders to reduce risk. You will own the SOC detection lifecycle, design Cortex XSOAR workflows, and perform memory forensics, malware analysis, and adversary emulation.

Qualifications

• 6+ years in cybersecurity with 4+ years in SOC/IR/threat hunting.
• Experience leading incidents from detection through recovery.
• Advanced SIEM/EDR skills and complex query development.
• Deep Windows/Linux/AD and cloud security knowledge.
• Hands-on forensics and malware analysis experience.
• Automation with Python or PowerShell for tooling.
• Mentor analysts and communicate findings to executives.
• Willing to participate in on-call rotation as senior lead.
• Scripting or automation with PowerShell, Python, or XQL.
• Develop and run log-analysis queries and automated detections.
• Experience evaluating detection coverage and attack simulations.

Responsibilities

• Act as technical lead or incident commander for high-impact incidents.
• Direct containment, eradication, and recovery across teams.
• Perform advanced endpoint/memory/cloud forensics to determine scope.
• Provide clear incident briefings to leadership and stakeholders.
• Lead post-incident reviews and drive remediation of root causes.
• Design and lead threat hunts using threat intel and MITRE coverage.
• Own SOC detection lifecycle and approve new/tuned rules.
• Design Cortex XSOAR workflows for enrichment and containment.
• Validate capabilities via purple teaming and adversary emulation.
• Mentor analysts and contribute to incident response playbooks.

Skills

SOC operations

Incident response

Threat hunting

Malware analysis

Forensics

Python scripting

PowerShell scripting

Automation

Team mentorship

Executive communication

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Splunk ES

SIEM

Palo Alto Cortex XSOAR

ServiceNow

Volatility

KAPE

Velociraptor

Ghidra

MITRE ATT&CK

Job description

SRI Resources is seeking a Senior SOC Analyst for an on-site, 12+ month contract in Irving, TX. You will lead incidents, conduct advanced forensics, and drive threat hunting and detection engineering.

You will mentor junior analysts and collaborate with Legal, Privacy, and IT stakeholders to reduce risk. You will own the SOC detection lifecycle, design Cortex XSOAR workflows, and perform memory forensics, malware analysis, and adversary emulation.