Senior Security Operations Lead: Detection & Response

Pearson; Cheyenne (WY); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Pearson in Durham (Hybrid) seeks a Senior Security Analyst to lead day-to-day SOC operations, drive detection engineering, and coordinate incident response across Pearson environments. You will refine SOC processes, implement automation, and align with security standards and regulatory requirements.

You will collaborate with threat intel teams, communicate findings to stakeholders, and participate in on-call coverage to ensure 24x7 security readiness.

Qualifications

• Must have experience working in regulated environments or government clients.
• 4+ years of experience in security operations, incident response, and detection engineering.
• Hands-on expertise with SOAR, EDR, NDR, and SIEM technologies.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).
• Strong multitasking and communication skills, especially for stakeholder management.

Responsibilities

• Lead and execute advanced SOC operations, including incident detection, triage, containment, and root cause analysis.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and procedures.
• Collaborate with threat intelligence teams to analyze risks and integrate TTPs into SOC operations.
• Deliver executive-level reporting, risk assessments, and metrics.

Skills

SOC leadership

Incident response

Threat detection engineering

SOAR

EDR

NDR

SIEM

Cloud platforms AWS

Cloud platforms Azure

Cloud platforms GCP

Regulated environments

Stakeholder communication

Tools

SOAR platforms

EDR tools

NDR tools

SIEM platforms

Cloud management tools

Job description

Pearson in Durham (Hybrid) seeks a Senior Security Analyst to lead day-to-day SOC operations, drive detection engineering, and coordinate incident response across Pearson environments. You will refine SOC processes, implement automation, and align with security standards and regulatory requirements.

You will collaborate with threat intel teams, communicate findings to stakeholders, and participate in on-call coverage to ensure 24x7 security readiness.