Remote Security Operations Lead Threat Detection & Response

Ledgent Technology; Houston (TX); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Work-from-home flexibility

Occasional in-person meetings

Job summary

Ledgent Technology is seeking a Lead Security Operations Analyst to join our mature security team in Houston, TX. You will lead investigations, mentor analysts, and drive detection engineering and automation across endpoint, cloud, identity, email, and network environments.

The ideal candidate has 5+ years in security operations, strong Microsoft Sentinel/Defender skills, and experience guiding incidents from detection through containment and recovery in a fast-paced enterprise.

Qualifications

• 5+ years of experience in Security Operations, Security Engineering, Incident Response, or related fields.
• Hands-on experience with Microsoft Sentinel and Microsoft Defender.
• Experience leading security investigations end-to-end.
• Knowledge of SIEM/EDR, IDS/IPS, email security, and threat detection.
• Experience investigating phishing, account compromise, and identity-based threats.
• Strong knowledge of Microsoft 365, Entra ID, AD, and cloud security concepts.
• Experience with ServiceNow or similar ticketing platforms.
• Excellent written and verbal communication; ability to work independently.

Responsibilities

• Lead investigations and response for complex incidents across endpoint, cloud, identity, email, and network.
• Monitor and triage alerts from SIEM, EDR, and other tools.
• Mentor junior analysts as a technical escalation point.
• Conduct proactive threat hunting to uncover undetected activity.
• Develop and tune detection rules and use cases.
• Support phishing, impersonation, BEC, and social engineering investigations.
• Improve security automation workflows and SOAR playbooks.
• Collaborate with security, IT, and cloud teams to strengthen defenses.
• Perform forensic analysis and evidence preservation when required.
• Maintain security procedures and incident response docs.
• Participate in on-call rotation for critical incidents.

Skills

Lead SOC

Microsoft Sentinel

Microsoft Defender

Incident Response

Threat Hunting

Automation / SOAR

Mentoring Analysts

Tools

ServiceNow

SIEM

EDR

SOAR

Threat Intel Platforms

Job description

Ledgent Technology is seeking a Lead Security Operations Analyst to join our mature security team in Houston, TX. You will lead investigations, mentor analysts, and drive detection engineering and automation across endpoint, cloud, identity, email, and network environments.

The ideal candidate has 5+ years in security operations, strong Microsoft Sentinel/Defender skills, and experience guiding incidents from detection through containment and recovery in a fast-paced enterprise.