Senior SecOps Analyst — Incident Response & Detection

Front Door Defense; Town of Texas (WI); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical Insurance

Dental and Vision Insurance

Time Off

Job summary

Saronic Technologies is seeking a Senior SecOps Analyst to join a growing security operations team and help drive detection, alert triage, and incident response across endpoint, cloud, identity, and network. You will utilize SIEM/XDR platforms, perform root-cause analysis, and lead containment and recovery for mid-tier incidents.

As an early-stage SecOps role, you will help build out playbooks, runbooks, and threat hunts, while shaping how the team operates and grows across security domains.

Qualifications

• 3+ years in Security Operations, detection engineering, or incident response.
• Experience triaging alerts across endpoint, cloud, identity, network, or SaaS.
• Proficiency with enterprise SIEM platforms and writing detection logic.
• Experience with EDR tooling and threat hunting.
• Knowledge of MITRE ATT&CK and incident response processes.
• Scripting in Python, PowerShell, or Bash for automation.
• Strong network fundamentals (TCP/IP, DNS, HTTP/S).
• Clear written and verbal communication; ownership mindset.
• Security clearance eligible

Responsibilities

• Monitor and triage security alerts across endpoint, cloud, identity, network, and SaaS telemetry using SIEM and XDR platforms.
• Lead initial incident response for mid-tier events: contain, eradicate, and recover.
• Conduct post-incident reviews and translate gaps into improvements.
• Contribute to playbooks, runbooks, and threat hunting initiatives.
• Collaborate with Security Engineering and IT during active incidents.

Skills

SIEM

XDR

EDR

MITRE ATT&CK

Python

PowerShell

Bash

Network fundamentals

Incident response

Threat hunting

Tools

SOAR platforms

EDR tooling

SIEM platforms

Job description

Saronic Technologies is seeking a Senior SecOps Analyst to join a growing security operations team and help drive detection, alert triage, and incident response across endpoint, cloud, identity, and network. You will utilize SIEM/XDR platforms, perform root-cause analysis, and lead containment and recovery for mid-tier incidents.

As an early-stage SecOps role, you will help build out playbooks, runbooks, and threat hunts, while shaping how the team operates and grows across security domains.