Senior Security Operations Center (SOC) Analyst

Clear Destination Inc.; Holyoke (MA); Hybrid; USD 115,000 - 142,000; Full time

Benefits offered by this job

Hybrid work

Relocation assistance

On-call rotation

Performance bonus

401(k) + planning

Tuition reimbursement

Wellness program

Onsite café

Flexible hours

Employee networks

Job summary

Clear Destination Inc. is seeking a Senior SOC Analyst to defend critical electrical grid operations in a hybrid on-site role in New England.

The position involves detecting and responding to complex threats using SIEM/EDR/XDR tools, malware analysis, and forensics. You will lead high-severity incidents, develop detection rules, and coordinate across IT, OT, and engineering teams, while mentoring junior analysts and improving SOC effectiveness.

Qualifications

• Experience defending critical infrastructure and SOC operations.
• Ability to lead incident response on high severity events.
• Knowledge of threat modeling and defensive coverage.
• Proficiency with SIEM, EDR/XDR, network monitoring, and forensic tools.
• Experience with malware analysis and digital forensics.
• Ability to develop detection rules and playbooks.
• Experience coordinating exercises and cross-functional teams.

Responsibilities

• Operate independently to detect, analyze, and respond to threats in SOC for critical grid operations.
• Lead containment, eradication, and recovery for major incidents across IT/OT/engineering.
• Apply threat modeling to anticipate attack paths and improve detections.
• Perform malware analysis, forensics, and root cause investigations.
• Develop and tune detection rules, correlation logic, and automated responses.
• Coordinate tabletop exercises, purple team activities, and grid security assessments.
• Mentor junior analysts and guide incident investigation techniques.

Skills

Self-starter mindset

Calm under pressure

Analytical thinking

Problem solving

Clear communication

Continuous learning

Education

GCIA

GCIH

GCFA

GREM

CISSP

CySA+

Tools

Splunk

QRadar

ArcSight

Microsoft Sentinel

CrowdStrike

Carbon Black

Microsoft Defender

SentinelOne

Wireshark

Zeek

tcpdump

EnCase

FTK

Volatility

Autopsy

MITRE ATT&CK

Cyber Kill Chain

IOCs

TCP/IP

DNS

HTTP/S

SMB

AWS

Azure

GCP

Python

PowerShell

Bash

SOAR

Palo Alto XSOAR

Job description

As a Senior SOC Analyst, you will play a pivotal role in defending critical infrastructure that powers millions of residents across New England. Our organization is responsible for safeguarding the electric grid, a cornerstone of public safety, economic stability, and national security.

What we offer you:

• Hybrid work environment (4 days/week on-site)
• Distance-based relocation assistance available
• 7 people paid on-call rotation
• Competitive compensation with a base salary + performance bonus
• Robust benefits package, including:
  • Enhanced 401(k) and financial planning support
  • Tuition reimbursement and professional development
  • Wellness programs, including an onsite gym
  • Free coffee at our onsite café
  • Flexible work hours
  • Employee Business Networks
• A stable, mission-driven workplace where your impact truly matters

How you will make an Impact

• Operate independently with minimal supervision to detect, analyze, and respond to complex security threats in a fast paced, mission critical SOC environment supporting electric grid operations.
• Lead response efforts for high severity and complex security incidents, coordinating containment, eradication, and recovery across IT, OT, and engineering teams.
• Apply threat modeling techniques to anticipate adversary attack paths, inform detection strategy, and improve defensive coverage across critical infrastructure systems.
• Perform advanced threat detection and analysis using SIEM, EDR/XDR, network monitoring, and forensic tools.
• Conduct malware analysis, digital forensics, and root cause investigations following security events affecting critical systems.
• Develop, tune, and maintain detection rules, correlation logic, and automated response playbooks to continuously improve SOC effectiveness.
• Coordinate tabletop exercises, purple team activities, and grid focused security assessments.
• Mentor and train junior SOC analysts, providing guidance on investigation techniques, tools, and best practices.
• Serve as the project implementor for SOC - related initiatives, partnering with the PMO to plan, coordinate, and execute corporate security projects impacting SOC operations.

What we are looking for

• SIEM platforms (Splunk, QRadar, ArcSight, Microsoft Sentinel, or similar)
• EDR/XDR solutions (CrowdStrike, Carbon Black, Microsoft Defender, SentinelOne, or similar)
• Network analysis tools (Wireshark, Zeek, tcpdump)
• Forensic tools and techniques (EnCase, FTK, Volatility, Autopsy)
• Attack frameworks such as MITRE ATT&CK and the Cyber Kill Chain
• Threat actor tactics, techniques, and procedures (TTPs)
• Threat intelligence frameworks and indicators of compromise (IOCs)
• Network protocols (TCP/IP, DNS, HTTP/S, SMTP, SMB)
• Firewalls, IDS/IPS, and proxy technologies
• Windows and Linux operating systems (administration and security hardening)
• Cloud environments (AWS, Azure, GCP) and cloud security principles
• Scripting languages (Python, PowerShell, Bash)
• Malware analysis techniques (static and dynamic analysis)
• Log analysis and event correlation
• Vulnerability management concepts

Skills and Abilities:

• Self-starter mindset with strong ownership, accountability, and professional judgment.
• Proven ability to remain calm and decisive under pressure in incidents impacting critical infrastructure.
• Strong analytical, problem solving, and critical thinking skills.
• Excellent written and verbal communication, with the ability to explain complex issues clearly.
• Commitment to continuous learning and staying current with evolving threats and technologies.

Critical Infrastructure SOC Competencies:

• Composure under pressure: Ability to remain calm, focused, and methodical during high-severity incidents where decisions directly impact grid reliability and public safety
• Mission-driven mindset: Deep understanding of the responsibility that comes with defending critical infrastructure essential to national security and public welfare
• Rapid triage and prioritization: Ability to quickly assess multiple simultaneous alerts and threats, making rapid decisions on priority and resource allocation
• Situational awareness: Continuous awareness of the operational environment, threat landscape, and potential cascading impacts of security events on critical systems
• Team coordination: Skill in working seamlessly with cross-functional teams including IT, OT, engineering, and leadership during incident response
• Clear communication under stress: Ability to convey technical information accurately and concisely to diverse stakeholders while managing active incidents

Preferred qualifications:

• Relevant certifications such as GCIA, GCIH, GCFA, GREM, CISSP, CySA+, or equivalent
• Experience in critical infrastructure or energy sector environments
• Background in threat hunting or offensive security concepts
• Familiarity with NERC CIP compliance requirements
• Experience with SOAR platforms (Splunk SOAR, Palo Alto XSOAR, Swimlane)
• Knowledge of OT/ICS security concepts

This employer will not sponsor applicants for work visas for this position (ex: H-1B, F-1/CPT/OPT, O-1, E-3, TN, J, etc.).

The expected salary range for this position is $115,000 - $142,000 per year. This role is also eligible for an annual performance bonus, comprehensive health insurance (medical, dental and vision), flexible spending and health savings accounts, a 401(k) plan with generous employer contributions and a student debt benefit, life and AD&D insurance, disability insurance, critical illness and hospital indemnity benefits, paid time off, paid leave, a wellness program, an employee assistance program and other great company perks.

#LI-HYBRID