Principal SOC Analyst

IronRoad; Ohio; Presencial; USD 150.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical benefits

Dental benefits

Vision benefits

401(k)

Paid time off

Descripción de la vacante

IronRoad is seeking a Principal SOC Analyst for a Cincinnati-based client. You will lead incident assessment across client environments, mentor analysts, and deliver executive security briefings.

Candidates must reside in Ohio and be eligible to work in the United States without sponsorship. The role is full-time with a salary range of $150,000 to $160,000 per year, dependent on experience, and on-site at our Cincinnati office.

Formación

• 4+ years as a SOC Analyst, Detection Engineer, Security Content Developer, or Security Engineer.
• Deep PCAP/network analysis skills and traffic interpretation.
• Hands-on experience with major EDR platforms.
• Proficiency with log analysis and building/maintaining dashboards.
• Ability to communicate technical concepts to staff and executives.
• Bachelor's degree in CS or Information Security (or equivalent).
• U.S. work authorization; Ohio residents only.

Responsabilidades

• Threat hunting across client environments to surface anomalies and compromises.
• Triage, investigate alerts across detection technologies, guide remediation.
• Log and monitor SIEM data for threats and intrusions.
• Integrate threat intelligence into client data analysis.
• Support containment and post-incident remediation.
• Write incident reports for executive review.
• Tune detections to reduce false positives without reducing coverage.
• Ensure data flows reach designated platforms and fix data gaps.
• Lead sprint reviews and maintain SOC documentation.
• Mentor junior analysts and collect metrics for executive briefings.

Conocimientos

Threat hunting

Triage & investigation

Log & event monitoring

Threat intelligence integration

Incident remediation

Executive reporting

Detection & tuning

Mentorship & metrics

Communication skills

Educación

Bachelor's degree in Computer Science or Information Security

Herramientas

CrowdStrike Falcon

SentinelOne

Carbon Black

Microsoft Defender for Endpoint

SIEM platforms

Descripción del empleo

Location: Cincinnati, OH (CANDIDATES MUST BE OHIO RESIDENTS TO BE CONSIDERED FOR POSITION)

Position Type: Full-Time

Salary: $150,000 - $160,000 / year (dependent on experience)

Company Overview

IronRoad is conducting a confidential search for a Principal SOC Analyst on behalf of our Cincinnati-based client. In this role, you will act as a lead analyst on the floor, owning the assessment of security events and incidents across client environments, mentoring newer analysts, and delivering scheduled security briefings directly to executive stakeholders. (IMPORTANT TO NOTE: CANDIDATE MUST LIVE IN OHIO DUE TO CONTRACT STIPULATIONS)

What You'll Do

• Threat Hunting: Run proactive threat hunts across client environments to surface anomalous activity, active/prior compromises, and misconfigurations.
• Triage & Investigation: Investigate alerts across multiple detection technologies, scope incidents, and guide clients toward rapid remediation.
• Log & Event Monitoring: Continuously monitor SIEM platforms and log data for threats, intrusions, and security anomalies.
• Threat Intelligence Integration: Collaborate with the Cyber Threat Intelligence team to apply global threat trends directly to client data analysis.
• Incident Support & Remediation: Support containment and post-incident remediation efforts.
• Executive Reporting: Write clear, concise incident reports tailored for C-suite executive review.
• Detection & Tuning: Partner with detection engineering to validate detections and tune logic to reduce false positives without compromising coverage.
• Data Flow Optimization: Ensure security-relevant data reaches designated platforms and collaborate with cross-functional teams to resolve data pipeline gaps.
• Process & Workflow Ownership: Run sprint reviews for your workstream while maintaining current documentation, workflows, and SOC processes.
• Mentorship & Metrics: Mentor junior analysts and gather metrics to support daily, weekly, and monthly executive briefings.

What You Need

• Experience: 4+ years as a SOC Analyst, Detection Engineer, Security Content Developer, or Security Engineer.
• Network Analysis: Deep skills in PCAP data analysis, network traffic interpretation, indicator extraction, network protocols, and network architecture.
• EDR Expertise: Hands-on experience with major EDR platforms (CrowdStrike Falcon, SentinelOne, Carbon Black, or Microsoft Defender for Endpoint).
• Log & Dashboarding Tools: Proficiency with log analysis tooling, pattern recognition, and building/maintaining operational dashboards.
• Communication Skills: Ability to clearly communicate technical concepts to both technical staff (e.g., Network Engineers) and executive leadership (e.g., CFOs).
• Leadership & Attention to Detail: Proven capability to mentor others and a strong focus on high-precision incident investigation.
• Education: Bachelor's degree in computer science, Information Security, or a related field (or equivalent hands-on experience).
• Work Authorization: Must be eligible to work in the United States without sponsorship (Open strictly to US citizens physically residing in the US).

Nice to Have

• 6+ years of relevant security experience.
• Prior SOC or CSIRT experience on a 24x7 watch desk.
• Working knowledge of attacker tooling, malware families, and threat actor TTPs mapped to the MITRE ATT&CK framework.
• Strong foundation in incident response frameworks and root cause analysis (RCA).
• Track record of hunting unknown threats and tracking active threat campaigns/adversaries.
• Experience delivering managed network security monitoring (MSSP format) across multi-client environments.
• Hands-on experience configuring and managing firewalls, routers, and network security appliances.
• Process optimization mindset with a focus on cycle-time reduction.
• Schedule: Flexible schedule with occasional non-traditional hours and after-hours on-call rotations.
• Work Location: Cincinnati office - OHIO RESIDENT REQUIRED.
• Contingencies: Offer contingent upon passing background, drug screen, and reference checks.
• Benefits: Full corporate benefits package (Medical, Dental, Vision, 401(k), Paid Time Off).