Security Operations Lead — Incident Response & Detection

enVista; Carmel (IN); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive pay bonuses

Comprehensive health coverage

PTO and sabbatical programme

401k and retirement resources

Flexible work options

Employee referral bonus

Job summary

enVista is hiring a Senior Security Operations Analyst to independently lead complex investigations across multiple systems and security domains. You will coordinate technical response activities for major incidents and develop practical detections, playbooks, and procedures.

The role also includes mentoring junior analysts and driving improvements, serving as the owner of a security platform or capability.

Qualifications

• 5-8 years of relevant cybersecurity experience with hands‑on security operations or incident response
• Bachelor's degree or equivalent practical experience in Cybersecurity/IT
• Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, and Azure security technologies
• Familiarity with SOC 2, ISO 27001, NIST CSF, PCI DSS and related frameworks
• Experience with phishing simulations and security awareness communications
• Strong ability to translate technical findings into business risk implications

Responsibilities

• Lead complex investigations across multiple systems and security domains
• Coordinate technical response activities for major security incidents
• Develop detections, playbooks, and response procedures
• Mentor junior analysts and drive operational improvements
• Interact with clients and internal teams to communicate risk clearly
• Own assigned security platform or capability and drive enhancements

Skills

Security operations

Incident response

Microsoft Defender

Microsoft Sentinel

Azure security

Threat intelligence

Risk assessment

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Defender

Azure security tools

Job description

enVista is hiring a Senior Security Operations Analyst to independently lead complex investigations across multiple systems and security domains. You will coordinate technical response activities for major incidents and develop practical detections, playbooks, and procedures.

The role also includes mentoring junior analysts and driving improvements, serving as the owner of a security platform or capability.