Remote SOC Lead: AI-Driven Cyber Defense

Harris; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Harris is seeking a Senior IT Cyber Defense Analyst (Shift Lead) to guide 24/7 SOC operations from a remote setting. You will lead investigations, coordinate incident response, and mentor SOC analysts, applying SIEM/EDR expertise, AI/LLM tools, and automation to strengthen detection and response capabilities.

You will enhance threat detection, drive efficient investigations, and ensure high-quality incident handling while coordinating with cross-functional teams across IT, Endpoint, Network, and

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• 5+ years of experience in SOC, cyber defense, or incident response, including shift leadership, incident coordination, or analyst mentoring.
• Strong hands-on experience with SIEM, EDR/XDR, incident investigation, and threat detection.
• Proficiency in Microsoft Sentinel and KQL; experience with Microsoft Defender, CrowdStrike, or similar security platforms.
• Strong understanding of networking, Windows/Linux, identity security, email threats, and MITRE ATT&CK.
• Mandatory practical AI/LLM proficiency, including prompt engineering, AI-assisted investigations, validation of AI-generated queries/scripts, and awareness of hallucinations, prompt injection, and data privacy risks.
• Scripting or automation experience using Python, PowerShell, APIs, or SOAR tools.
• Strong analytical, communication, decision-making, and team leadership skills; willingness to work in a 24/7 rotational shift environment.

Responsibilities

• Lead SOC shift operations, prioritize alerts, manage escalations, and ensure timely handovers and SLA adherence.
• Investigate complex incidents involving phishing, malware, ransomware, compromised accounts, endpoint threats, and suspicious network activity.
• Conduct threat hunting, correlate security telemetry, and map attacker behavior to the MITRE ATT&CK framework.
• Develop, optimize, and troubleshoot SIEM queries, analytics rules, and detection use cases using Microsoft Sentinel and KQL.
• Use approved AI/LLM tools for alert triage, investigation assistance, threat intelligence enrichment, KQL development, incident reporting, and workflow automation; independently validate AI-generated outputs.
• Automate repetitive SOC tasks using Python, PowerShell, APIs, or SOAR capabilities.
• Mentor analysts, improve investigation quality, reduce false positives, and maintain accurate incident documentation and audit-ready evidence.
• Coordinate with Incident Response, IT, Endpoint, Network, and Cloud teams to support containment, remediation, and recovery.

Skills

SIEM

EDR/XDR

KQL

Microsoft Sentinel

AI/LLM

Python

PowerShell

SOAR

Leadership

Incident response

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Microsoft Defender

CrowdStrike

Job description

Harris is seeking a Senior IT Cyber Defense Analyst (Shift Lead) to guide 24/7 SOC operations from a remote setting. You will lead investigations, coordinate incident response, and mentor SOC analysts, applying SIEM/EDR expertise, AI/LLM tools, and automation to strengthen detection and response capabilities.

You will enhance threat detection, drive efficient investigations, and ensure high-quality incident handling while coordinating with cross-functional teams across IT, Endpoint, Network, and