Senior Security Operations Analyst: Threat Hunting & IR

Phase2 Technology; Austin (TX); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Fertility benefits

Commuter benefits

Student loan assistance

Firm holidays

Job summary

Norton Rose Fulbright US LLP is seeking a Senior Information Security Analyst to join its global Security Operations team. The role focuses on 24x7 monitoring, detection and response, threat hunting and analytics to strengthen threat detection and incident response across endpoints, cloud, email and identity systems.

The Senior Analyst will lead investigations, improve detection capabilities, and mentor junior staff while collaborating with regional IT teams and adhering to NIST incident

Qualifications

• Technical bachelor's degree in IT / Information Security or equivalent experience
• 5+ years in security operations or related infrastructure
• Proven ability to adapt to emerging threats and information
• Expertise with Microsoft 365 Defender and Microsoft Sentinel for detection and response
• Strong knowledge of core security technologies (firewalls, IDS/IPS, EDR, SIEM) and incident-response (NIST)
• Working knowledge of EDR, DLP, removable-media encryption; cloud-based security (Zscaler, Mimecast, Proofpoint, Cisco)
• Experience with ServiceNow or similar service management tools

Responsibilities

• Operate and manage security incidents and requests to SLA guidelines
• Monitor, triage and investigate alerts across endpoints, cloud, identity, email and network telemetry
• Lead structured incident response aligned to a recognized lifecycle
• Triage and remediate phishing, vishing and impersonation attacks
• Configure and tune security parameters in monitoring systems
• Conduct proactive threat hunting and maintain detection rules (Sigma/KQL) and MITRE ATT&CK mappings
• Develop and maintain SOAR playbooks to automate response
• Use AI-assisted detection tooling and validate AI findings
• Mentor junior analysts and own SOC processes
• Maintain SOC playbooks, runbooks, and monitoring configuration

Skills

Microsoft 365 Defender

Microsoft Sentinel

Firewalls

IDS/IPS

EDR

SIEM

NIST

Active Directory

Entra ID / Azure AD

PowerShell

Python

SOAR

Sigma / KQL

Threat hunting

Cloud platforms (Azure/AWS/GCP)

Education

Technical bachelor’s degree in IT / Information Security

Security certifications (e.g., CISSP, GIAC GSOC, GCIH, AZ-500)

Tools

Microsoft 365 Defender

Microsoft Sentinel

ZT/Zscaler

Mimecast

Proofpoint

Cisco security solutions

ServiceNow

Job description

Norton Rose Fulbright US LLP is seeking a Senior Information Security Analyst to join its global Security Operations team. The role focuses on 24x7 monitoring, detection and response, threat hunting and analytics to strengthen threat detection and incident response across endpoints, cloud, email and identity systems.

The Senior Analyst will lead investigations, improve detection capabilities, and mentor junior staff while collaborating with regional IT teams and adhering to NIST incident