Senior SOC Analyst

KellyMitchell Group; Irving (TX); On-site; USD 91,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance

Employee-Owned Profit Sharing (ESOP)

401K offered

Onsite work environment

Job summary

KellyMitchell Group is seeking a Sr. SOC Analyst to serve as the senior technical authority in the Security Operations Center, leading investigations and responses for the organization's most complex security incidents.

The role requires strong leadership in incident response and advanced forensics across on-prem and cloud environments. The candidate will act as technical lead for critical incidents, drive containment and recovery, and coordinate with Legal, Privacy, and Communications.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field, or equivalent experience.
• 6+ years of experience in cybersecurity, including 4+ years in SOC, IR, or threat hunting.
• Hands-on with Splunk ES and Palo Alto Cortex is highly important.
• Proven experience leading response to complex, high-severity incidents from detection through recovery.
• Advanced proficiency with SIEM/EDR platforms and detection engineering.

Responsibilities

• Act as technical lead or incident commander for ransomware, BEC, data exfiltration, and insider threats.
• Direct containment, eradication, and recovery across multiple teams with real-time decisions.
• Perform advanced forensic analysis of endpoints, memory, and cloud to establish root cause and scope.
• Provide incident briefings to Manager, IT Security leadership, and stakeholders.
• Lead post-incident reviews and remediation of root causes and control gaps.
• Design and lead hypothesis-driven threat hunts based on threat intel and MITRE ATT&CK gaps.
• Perform static and dynamic malware analysis to extract IOCs and detection opportunities.

Skills

Incident response

Threat hunting

Malware analysis

Forensic investigation

SIEM/EDR

Splunk ES

Palo Alto Cortex

Python/PowerShell

Windows/Linux/AD

Education

Bachelor's degree or equivalent

Tools

Splunk ES

Palo Alto Cortex

Job description

Job Summary

Our client, a retail &consumer goods provider, is seeking a Sr. SOC Analyst to serve as the senior technical authority in the Security Operations Center, leading investigation, and response for the organization's most complex and critical security incidents.

Contract Details

• Location: Irving, TX
• Contract Length: Long-term
• Work Model: Onsite

Core Responsibilities

• Act as technical lead or incident commander for critical, high-impact incidents such as ransomware, business email compromise, data exfiltration, and insider threats
• Direct containment, eradication, and recovery across multiple teams, making real-time technical decisions within delegated authority
• Perform advanced forensic analysis of endpoints, memory, and cloud environments to establish root cause, attacker dwell time, and full scope of compromise
• Provide clear incident briefings and status updates to your Manager, IT Security leadership, and stakeholders such as Legal, Privacy, and Communications
• Lead post-incident reviews and drive remediation of root causes and control gaps to completion
• Design and lead hypothesis-driven threat hunts based on threat intelligence, MITRE ATT&CK coverage gaps, and environmental risk
• Perform static and dynamic malware analysis to extract IOCs, behaviors, and detection opportunities

Required Skills/Experience (Must-Haves)

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent experience
• 6+ years of experience in cybersecurity, including at least 4 years in SOC, incident response, or threat hunting roles
• Hands-on experience with Splunk ES and Palo Alto Cortex is going to be extremely important
• Demonstrated experience leading response to complex, high-severity incidents from detection through recovery
• Advanced proficiency with SIEM and EDR platforms, including complex query development (e.g., Splunk SPL) and detection engineering
• Deep knowledge of Windows, Linux, Active Directory, and cloud attack techniques, including persistence, privilege escalation, and lateral movement
• Hands-on experience with digital forensics (memory, disk, and log analysis) and malware analysis
• Proficiency in Python or PowerShell for automation, data analysis, and tooling

Preferred Skills/Experience (Nice-to-Haves)

• Industry certifications such as CISSP, GIAC GCFA, GCIH, GREM, GCTI, or OSCP
• Experience developing Cortex XSOAR content and implementing risk-based alerting in Splunk ES
• Experience responding to incidents in cloud environments (AWS, Azure, or Google Cloud) and Microsoft 365
• Experience planning or running purple team and adversary emulation exercises
• Experience in retail, payments, or PCI DSS-regulated environments, including familiarity with breach notification requirements

Key Competencies & Behaviors

• Incident response leadership
• Advanced threat hunting
• Forensic investigation expertise
• Malware analysis proficiency
• SIEM & EDR expertise
• Cybersecurity problem-solving
• Stakeholder communication
• Cross-functional collaboration
• Security automation mindset
• Continuous improvement focus

Work Environment

• Location: Irving, TX
• Work Model: 5 days onsite

Compensation & Benefits

Pay Range: The approximate pay range for this position is between $91,000 and $130,000. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.

• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We're movers and shakers! We don't mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.

Marketing Disclosure

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy.