Senior Security Operations Lead & Detection Engineer

Pearson; Atlanta (GA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Pearson’s Security Operations Center seeks a Senior Security Analyst to lead day-to-day operations, drive incident response, and advance detection engineering across Pearson environments in a hybrid Durham setting.

You will develop detection logic, automation workflows, and playbooks, collaborate with threat intelligence, and report security metrics to executives while ensuring compliance with standards and regulatory requirements.

Qualifications

• Must have experience working with regulated environments or government clients.
• Proven experience in security operations, incident response, and detection engineering (4+ years).
• Hands-on expertise with SOAR, EDR, NDR, and SIEM technologies.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).
• Strong multitasking, adaptability, and thriving in fast-paced environments.
• Excellent communication skills, especially in stakeholder management and translating risk to non-technical audiences.

Responsibilities

• Lead and execute advanced SOC operations across Pearson environments.
• On-call schedule to ensure 24x7 coverage during non-office hours.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and procedures.
• Collaborate with threat intelligence teams to analyze risks and integrate TTPs.
• Act as trusted advisor to internal stakeholders and translate findings for executives.
• Ensure compliance with standards and Pearson policies; deliver risk assessments and metrics.

Skills

Security operations

Incident response

Detection engineering

SOAR

EDR

NDR

SIEM

Cloud services AWS/Azure/GCP

Stakeholder communication

Tools

SOAR

EDR

NDR

SIEM

Job description

Pearson’s Security Operations Center seeks a Senior Security Analyst to lead day-to-day operations, drive incident response, and advance detection engineering across Pearson environments in a hybrid Durham setting.

You will develop detection logic, automation workflows, and playbooks, collaborate with threat intelligence, and report security metrics to executives while ensuring compliance with standards and regulatory requirements.