Senior Security Analyst - Lead SOC & Threat Hunting Remote

SPS Commerce Inc; Minneapolis (MN); Hybrid; USD 108,200 - 140,000; Full time

Job summary

SPS Commerce Inc is seeking a Senior SOC Engineer to lead detection and response, manage the SOC day to day, and drive improvements across incident response, threat hunting, and DFIR within a cloud-based environment.

You will triage alerts, coordinate incident containment, perform proactive threat hunts, and integrate AI tools to accelerate investigations. This role offers hybrid work based in Minneapolis, MN with remote flexibility.

Qualifications

• 5+ years in security operations, incident response, or threat detection with senior-level depth in DFIR and SOC work.
• Hands-on investigation experience with SIEM and EDR platforms, capable of searching, pivoting across identity, cloud, and network logs, and scoping incidents end to end.
• Strong evidence-handling practice and forensic fundamentals for preserving and reasoning over disk, memory, and log artifacts.
• Understanding of adversarial behavior (e.g., MITRE ATT&CK).
• Familiarity with exposure management workflows—triage, prioritization, and remediation tracking.
• Clear written and verbal communication with the judgment to brief engineers and executives appropriately.
• Collaborative style, genuine curiosity about security and technology, and sound judgment across a large organization.
• Internal candidates must have SOC, security operations, or security engineering experience handling escalated investigations or incident response, along with at least 1 year of SPS experience.

Responsibilities

• Lead alert triage and investigation, serving as the escalation point for SOC alerts and gathering evidence from SIEM, EDR, identity, cloud audit trails, network and email telemetry, and other sources.
• Run incident response for confirmed high-severity incidents: scope, contain, coordinate with stakeholders, and provide timely updates to leadership.
• Document incidents thoroughly and ensure genuine closure beyond ticket completion.
• Conduct proactive threat hunting informed by threat intelligence, surfacing gaps before they become incidents.
• Integrate AI and automation tools to accelerate investigation, summarization, and documentation, and collaborate with engineering to implement improvements.
• Collaborate with exposure management, security engineering, and cloud security teams on triage, prioritization, and remediation tracking.
• Sharpen detections and tooling by executing runbooks, identifying stale or missing guidance, and providing improvement requests to engineering.
• Develop the SOC by reviewing determination quality, coaching analysts, and participating in on‑call rotation.
• Perform additional duties as assigned.

Skills

Security operations

Incident response

Threat detection

DFIR

SOC work

Communication

Tools

SIEM

EDR

CrowdStrike

SOAR

Job description

SPS Commerce Inc is seeking a Senior SOC Engineer to lead detection and response, manage the SOC day to day, and drive improvements across incident response, threat hunting, and DFIR within a cloud-based environment.

You will triage alerts, coordinate incident containment, perform proactive threat hunts, and integrate AI tools to accelerate investigations. This role offers hybrid work based in Minneapolis, MN with remote flexibility.