Senior Security Operations Lead & Detection Engineer

Pearson; Helena (MT); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Pearson’s Security Operations Center seeks a Senior Security Analyst to lead 24x7 security operations, drive incident response, and advance detection engineering across Pearson environments. You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson’s security standards and regulatory requirements.

You will lead advanced SOC operations, respond to incidents, and collaborate with internal and external partners to improve containment and response times.

Qualifications

• Experience in security operations, incident response, and detection engineering (4+ years).
• Experience with regulated environments or government clients.
• Hands-on expertise with SOAR, EDR, NDR, and SIEM technologies.
• Experience with AWS, Azure, or GCP cloud services.
• Strong multitasking and adaptability in fast-paced environments.
• Excellent communication, especially in translating risk to non-technical audiences.

Responsibilities

• Lead day-to-day SOC operations, including incident detection, triage, containment, and root cause analysis.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and procedures.
• Collaborate with threat intel teams to analyze risks and integrate TTPs into SOC.
• Provide executive-level reporting, risk assessments, and metrics.

Skills

Security operations

Incident response

Detection engineering

SOAR

EDR

NDR

SIEM

Cloud services

Stakeholder communication

Tools

SIEM

SOAR

EDR

NDR

Job description

Pearson’s Security Operations Center seeks a Senior Security Analyst to lead 24x7 security operations, drive incident response, and advance detection engineering across Pearson environments. You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson’s security standards and regulatory requirements.

You will lead advanced SOC operations, respond to incidents, and collaborate with internal and external partners to improve containment and response times.