Senior SOC Analyst

Apexon; Pennsylvania; Sur place; USD 110 000 - 160 000; Plein temps

Résumé du poste

Apexon in Pennsylvania seeks a senior SOC analyst to lead investigations of complex incidents, mentor analysts, and contribute to incident response playbooks.

You will analyze threats across endpoint, network, identity, cloud, and data environments; coordinate containment, eradication, and recovery; and help tune detections while sharing knowledge with the team.

Qualifications

• 5–8 years of cybersecurity or SOC experience with advanced incident response and security monitoring.
• Certifications such as GCIH, GCIA, GCFE, GCDA, CISSP or equivalent.

Responsabilités

• Analyze threats across endpoints, networks, identity, cloud, and data; coordinate containment and recovery.
• Perform threat hunting, detection tuning, and root-cause analysis; mentor junior staff.
• Document findings, remediation recommendations, and training materials.
• Improve SOC processes, monitoring, and playbooks.

Connaissances

Threat hunting

Incident response

Security monitoring

SOC operations

Mentoring

Palo Alto

Fortinet

Tenable

Rapid7

Cribl

Cortex

SIEM

EDR/XDR

SOAR

Network security

Cloud security

MITRE ATT&CK

NIST

Outils

Palo Alto

Fortinet

Tenable

Rapid7

Cribl

Cortex

Description du poste

• complex incident investigation and response.
• threat hunting.
• playbook development.
• cross-functional remediation.
• mentoring and knowledge transfer.
• Typically, 5–8 years of relevant cybersecurity or SOC experience, with advanced incident response and security monitoring experience.
• Relevant certifications may include GCIH, GCIA, GCFE, GCDA, CISSP, or equivalent.

Preferred Skills:

• Palo Alto; Fortinet; Tenable; Rapid7; Cribl; Cortex; advanced SIEM, EDR/XDR, SOAR, network, identity, and cloud security; MITRE ATT&CK and NIST;
• Relevant GIAC, CISSP, or equivalent certifications.

Responsibilities:

• Serve as a senior escalation point for Tier 1 and Tier 2 analysts and lead investigations of complex or high-visibility incidents.
• Analyze threats across endpoint, network, identity, cloud, application, and data environments; coordinate containment, eradication, and recovery; perform threat hunting, detection tuning, and root-cause analysis; document findings and remediation recommendations; develop knowledge articles and training pathways; mentor junior and peer technicians; support backup/recovery and backend troubleshooting as required.
• Incident investigation documentation and recommendations; improved detection content and response playbooks; knowledge articles and training materials; documented technical guidance and escalations; and contributions to SOC process and monitoring improvements.
• Confirm measurable deliverables and acceptance criteria with the engagement team.