Senior SecOps Analyst: Detection & Incident Response

Saronic; Austin (TX); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental & Vision

Time Off & Holidays

Parental Leave

401(k) Plan with company match

Stock Options

Life & Disability Insurance

Pet Insurance

Free lunch & snacks

Job summary

Saronic Technologies, a leader in autonomous maritime security, seeks a Senior SecOps Analyst to drive detection and response across endpoint, cloud, and identity domains. You will triage alerts, lead initial response, run hunts, and help build runbooks in a growing SecOps team.

You will join an on-call rotation and contribute to post-incident reviews, with room to grow across security domains as the team scales.

Qualifications

• 3+ years of hands-on experience in a Security Operations, detection engineering, or incident response role.
• Experience triaging and investigating alerts across at least two of the following: endpoint, cloud, identity, network, or SaaS environments
• Hands-on proficiency with enterprise SIEM platforms and their query languages; ability to write and iterate on detection logic from scratch
• Experience with EDR tooling in an operational context; ability to hunt, triage, and respond using endpoint telemetry
• Solid understanding of attacker TTPs mapped to MITRE ATT&CK, and the ability to apply that knowledge during active investigations
• Scripting proficiency in Python, PowerShell, or Bash for alert enrichment, automation, or triage support

Responsibilities

• Monitor and triage security alerts across endpoint, cloud, identity, network, and SaaS telemetry using enterprise SIEM and XDR platforms
• Lead initial incident response for mid-tier events: contain, eradicate, and recover across endpoint, cloud, and identity domains
• Participate in on-call incident rotation and effectively communicate status and findings to the SecOps Lead and relevant stakeholders
• Conduct post-incident reviews, identifying gaps in detection, response, and containment and translating them into actionable improvements
• Coordinate with Security Engineering and IT during active incidents to accelerate response and reduce dwell time

Skills

Security Operations

Incident response

Threat hunting

Scripting (Python/PowerShell/Bash)

EDR proficiency

MITRE ATT&CK knowledge

Tools

SIEM platforms

EDR tooling

SOAR platforms

Job description

Saronic Technologies, a leader in autonomous maritime security, seeks a Senior SecOps Analyst to drive detection and response across endpoint, cloud, and identity domains. You will triage alerts, lead initial response, run hunts, and help build runbooks in a growing SecOps team.

You will join an on-call rotation and contribute to post-incident reviews, with room to grow across security domains as the team scales.