Senior Security Operations Lead – Hybrid, Detection & IR

Pearson; Lincoln (NE); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Pearson’s Security Operations Center is seeking a Senior Security Analyst to lead day-to-day security operations, drive process improvements, and advance detection engineering across Pearson environments. You will refine SOC processes, automate responses, and ensure alignment with Pearson security standards and regulatory requirements.

The role requires on-call coverage for 24x7 operations, strong incident response expertise, and collaboration with internal and external partners to safeguard

Qualifications

• Must have experience in regulated environments or government clients.
• Proven experience in security operations, incident response, and detection engineering (4+ years).
• Hands-on with SOAR, EDR, NDR, and SIEM technologies.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).
• Strong multitasking in fast-paced environments and excellent communication across stakeholders.

Responsibilities

• Lead and execute advanced SOC operations including incident detection, triage, containment and root cause analysis.
• Develop and optimize detection logic, playbooks, and automated response workflows to reduce MTTC.
• Continuously assess and enhance SOC processes and governance.
• Collaborate with threat intelligence to analyze risks and integrate TTPs into SOC.
• Serve as a trusted advisor to internal stakeholders, translating risks into actionable insights.
• Ensure compliance with standards (e.g., NCSC, Cyber Essentials Plus) and Pearson policies.
• Deliver executive-level reporting, risk assessments, and SOC metrics.

Skills

Security Operations

Incident Response

Detection Engineering

Cloud Security

Communication

Stakeholder Management

Tools

SOAR

EDR

NDR

SIEM

Cloud Providers (AWS/Azure/GCP)

Job description

Pearson’s Security Operations Center is seeking a Senior Security Analyst to lead day-to-day security operations, drive process improvements, and advance detection engineering across Pearson environments. You will refine SOC processes, automate responses, and ensure alignment with Pearson security standards and regulatory requirements.

The role requires on-call coverage for 24x7 operations, strong incident response expertise, and collaboration with internal and external partners to safeguard