Senior Security Operations Center (SOC) Analyst

Zelis; Atlanta (GA); Hybrid; USD 112,000 - 154,000; Full time

Benefits offered by this job

401k with match

Flexible PTO

Holidays

Parental leave

Life and disability insurance

Health, dental, vision benefits

Job summary

Zelis, a leader in healthcare financial technology, seeks a Senior SOC Analyst to lead incident investigations and strengthen detection and response capabilities. You will perform hands-on forensics, guide the team, and focus on DLP and insider risk initiatives.

Ideal candidates have 3+ years handling enterprise incidents, strong analytics, and collaboration with cross-functional teams. Hybrid in-office role with strong growth and training opportunities.

Qualifications

• Bachelor's degree in CS/Engineering/Info Security or 4+ years of equivalent experience.
• 3+ years of enterprise level incident handling.
• Ability to partner with enterprise teams within a cybersecurity context.
• Excellent verbal and written communication in cybersecurity processes.
• Proven thought leadership via innovative approaches.

Responsibilities

• Triage alerts, investigate suspicious activity, lead incident response steps.
• Coordinate containment and recovery efforts.
• Collect and normalize logs and security data for analysis.
• Perform digital forensics on hosts, cloud workloads, and network artifacts.
• Mentor and train newer analysts; share knowledge and run trainings.
• Lead shift responsibilities and participate in rotating on-call.
• Identify process/tool gaps and propose improvements.
• Assist team with technical questions and documented response workflows.

Skills

Incident handling

Cybersecurity operations

Digital forensics

Mentoring & training

Shift leadership

Data collection & normalization

Communication skills

Scripting (Python/PowerShell)

SIEM/SOAR knowledge

Education

Bachelor of Computer Science/Engineering/Info Security or 4+ years experience

Tools

SIEM

SOAR

Malware sandboxing

Job description

At Zelis, we Get Stuff Done. So, let's get to it!

A Little About Us

Zelis is modernizing the healthcare financial experience across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts – driving real, measurable results for clients.

At Zelis, AI is woven into the fabric of how we work. Every associate is expected - and empowered - to partner with AI to challenge the status quo, accelerate innovation, and amplify their impact. This is a place for builders with a growth mindset who act with agility, embrace change, and use modern technology to shape smarter solutions, exceptional experiences, and the future of our industry for our clients, customers, and our culture.

A Little About You

You bring a unique blend of personality and professional expertise to your work, inspiring others with your passion and dedication. Your career is a testament to your diverse experiences, community involvement, and the valuable lessons you've learned along the way. You are more than just your resume; you are a reflection of your achievements, the knowledge you've gained, and the personal interests that shape who you are.

Position Overview

Manages security operations tasks independently and contributes to the design and implementation of security controls.

As a Senior Security Operations Center (SOC) Analyst, you’ll take the lead on investigating and mitigating security incidents across the organization. You’ll dig into digital evidence, guide teammates through complex problems, and help strengthen our overall detection and response capabilities. In this role, you’ll handle hands‑on technical work like forensics and incident analysis, while also supporting the team by sharing knowledge, improving processes, and helping shape how we respond to threats. A component of this role will be focused around DLP and insider risk initiatives, which include incident analysis and process building in this space.

Key Responsibilities

• Incident Analysis & Handling: Triage alerts, investigate suspicious activity, lead incident response steps, and coordinate containment and recovery efforts.
• Data Collection & Normalization: Make sure logs and security data are gathered correctly, cleaned up, and organized so the team can analyze them effectively.
• Digital Forensics: Examine systems, files, logs and network data to understand what happened during security events.
• Mentoring & Training: Help newer analysts grow by sharing your experience, offering guidance, and running training sessions when needed.
• Technical / Process Guidance: Assist team members with technical questions, tool usage, investigation methods, and established response workflows.
• Shift Leadership: Act as the point person during your shift: manage workload, oversee investigations, ensure smooth handoffs, and support teammates. Participate in a rotating on‑call schedule as required.
• Innovation: Look for opportunities to improve processes, recommend new tools or automations, and help refine how the team operates.
• Perform other tasks required by management as needed.

Here is What You Can Expect on a Typical Day:

• Reviewing alerts and logs to identify potential threats or unusual activity.
• Leading or assisting with active investigations and driving them toward containment and resolution.
• Running forensic analysis on hosts, cloud workloads, or network artifacts to uncover root causes and timelines.
• Collaborating with IT, cloud, engineering, or other security teams to gather data or take action on investigations.
• Sharing insights with teammates, helping them troubleshoot difficult cases, or walking them through an investigation technique.
• Updating documentation, writing reports, or summarizing incident findings.
• Teaching something new to the team—maybe a tool trick, a technique, or a better approach to analysis.
• Handling shift responsibilities like queue management, monitoring ongoing investigations, and tracking priorities.
• Identifying process gaps or tools that could be improved and proposing better ways to do things.
• Perform other tasks required by management as needed.

Qualifications

• Bachelor of Computer Science, Engineering, Information Security, Information Technology, or 4+ years of equivalent experience.
• 3+ years of enterprise level incident handling
• Ability to partner with enterprise teams within a cybersecurity context, leveraging diverse ideas, experiences, thoughts, and perspectives to improve the organization.
• Effective oral and written communication skills with experience in cybersecurity technical process documentation.
• Demonstrated cyber defense and information security passion, including commitment to maintaining technical proficiency
• Proven record of thought leadership via innovation and non‑traditional solutions
• Fundamental understanding of IT Security practices/programs/tooling, with demonstrated examples of driving initiatives forwards.

Preferred Qualifications

• Advanced cybersecurity certifications (e.g., GCFA, GCIA, GNFA, GCTI, GREM, GCIH, GCFA, GPEN, OSCP, etc.).
• Cloud (AWS, Azure, GCP, etc.) certifications
• Proficiency in scripting and high‑level programming languages (Python, PowerShell, bash, etc.)
• Functional knowledge of SIEM, SOAR, malware sandboxing solutions and related tools.

Please note at this time we are unable to proceed with candidates who require visa sponsorship now or in the future.

Location and Workplace Flexibility

Zelis is headquartered in the U.S., with multiple locations across the country and in Hyderabad, India. Check out our locations to learn more about our offices. All employee work locations are based on the needs of the position and are determined by the Leadership team. In‑office work and activities vary based on work and team objectives in accordance with Company policies.

While location expectations vary by role, candidates within approximately 50 miles of a U.S. office are generally preferred to support collaboration when needed. Our hybrid approach is flexible, and in‑office presence is guided by team and business needs rather than a fixed weekly schedule.

Base Salary Range

$112,000.00 - $154,000.00

At Zelis we are committed to providing fair and equitable compensation packages. The base salary range allows us to make an offer that considers multiple individualized factors, including experience, education, qualifications, as well as job‑related and industry‑related knowledge and skills, etc. Base pay is just one part of our Total Rewards package, which may also include discretionary bonus plans, commissions, or other incentives depending on the role.

Zelis’ full‑time associates are eligible for a highly competitive benefits package as well, which demonstrates our commitment to our employees’ health, well‑being, and financial protection. The US‑based benefits include a 401k plan with employer match, flexible paid time off, holidays, parental leaves, life and disability insurance, and health benefits including medical, dental, vision, and prescription drug coverage.

Equal Employment Opportunity

Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

We welcome applicants from all backgrounds and encourage you to apply even if you don’t meet 100% of the qualifications for the role. We believe in the value of diverse perspectives and experiences and are committed to building an inclusive workplace for all.

Accessibility Support

We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability or a disabled veteran and require a reasonable accommodation with any part of the application and/or interview process, please email [e-mail].

Disclaimer

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities, duties, and skills from time to time.