Senior SOC Analyst

Soni; Philadelphia (Philadelphia County); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading cybersecurity company is seeking a Senior SOC Analyst to enhance enterprise security through effective detection and incident response. The role involves leading investigations, detecting threats using SIEM, and developing response playbooks. Ideal candidates will have over 3 years of experience with threat hunting and be skilled in scripting for automation purposes. Join our team in Philadelphia to shape threat detection strategies and mentor junior staff.

Qualifications

• 3–5+ years of SOC / Detection & Response experience.
• Hands-on experience with SIEM, EDR, and SOAR platforms is crucial.
• Strong skills in detection engineering and incident response.

Responsibilities

• Lead alert triage and end-to-end incident response.
• Build and tune SIEM detections to improve signal quality.
• Develop SOC playbooks, escalation workflows, and response automation.

Skills

SOC / Detection & Response experience

Detection engineering

Incident response

Playbook development

Scripting experience (Python, PowerShell, or Bash)

Tools

SIEM platforms (e.g., Sentinel, QRadar)

EDR platforms (e.g., CrowdStrike, Defender)

SOAR platforms

Job description

We’re looking for a Senior SOC Analyst to lead detection, triage, and incident response across the enterprise. This role is hands‑on and focuses on high‑fidelity detections, playbook development, threat hunting, and automation to surface and stop threats early.

Key Responsibilities

• Lead alert triage, investigations, and end‑to‑end incident response
• Build and tune SIEM detections; reduce false positives and improve signal quality
• Develop SOC playbooks, escalation workflows, and response automation
• Lead proactive threat hunting and post‑incident reviews
• Drive detection strategy across the attack lifecycle and mentor junior analysts

Qualifications

• 3–5+ years of SOC / Detection & Response experience
• Hands‑on experience with SIEM, EDR, and SOAR platforms (e.g., Sentinel, QRadar, CrowdStrike, Defender)
• Strong detection engineering, incident response, and playbook development skills
• Scripting experience (Python, PowerShell, or Bash) for automation and enrichment
• Excellent written communication and ability to brief technical incidents to leadership