Security Operations Lead: Detection & Incident Response

Pearson; Topeka (KS); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Pearson’s Security Operations Center is seeking a Senior Security Analyst to lead day-to-day operations, drive enhancements, and advance detection engineering across Pearson environments. You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson standards and regulatory requirements.

The role requires 4+ years in security operations, hands-on with SOAR/EDR/NDR/SIEM, and experience with cloud providers (AWS, Azure, GCP).

Qualifications

• Experience in regulated environments or government clients.
• 4+ years in security operations, incident response, and detection engineering.
• Hands-on with SOAR, EDR, NDR and SIEM technologies.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).
• Strong multitasking and thriving in fast-paced environments.
• Excellent communication, especially for stakeholder management.

Responsibilities

• Lead and execute advanced SOC operations, including incident detection, triage, containment, and root cause analysis.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and procedures.
• Collaborate with threat intelligence teams to analyze risks and integrate TTPs into SOC operations.
• Act as a trusted advisor to internal stakeholders and translate findings for audiences.
• Ensure SOC activities comply with standards and Pearson policies.
• Deliver executive-level reporting, risk assessments, and metrics.

Skills

SOC operations

Incident response

Detection engineering

SOAR

EDR

NDR

SIEM

AWS

Azure

GCP

Cloud experience

Stakeholder management

Communication skills

Tools

SOAR

EDR

NDR

SIEM

Job description

Pearson’s Security Operations Center is seeking a Senior Security Analyst to lead day-to-day operations, drive enhancements, and advance detection engineering across Pearson environments. You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson standards and regulatory requirements.

The role requires 4+ years in security operations, hands-on with SOAR/EDR/NDR/SIEM, and experience with cloud providers (AWS, Azure, GCP).