Senior SOC Analyst: Azure Sentinel & IR Lead | Hybrid TX

INSPYR Solutions; Houston (TX); Hybrid; USD 110,000 - 165,000; Full time

Job summary

INSPYR Solutions is seeking a Senior Information Security Analyst to join our clients' global Security Operations (SOC) team. You will lead monitoring, detection and response activities, drive threat hunting, and improve detection capabilities across endpoints, cloud, identity, email and network telemetry.

The role focuses on incident response, detection engineering, and proactive threat hunting, reporting to the Information Security Manager.

Qualifications

• Bachelor's degree in IT or Information Security, or equivalent experience.
• At least 5 years in security operations or related field.
• Proven expertise with Microsoft 365 Defender and Microsoft Sentinel.
• Strong knowledge of SIEM, EDR, firewalls and incident response.

Responsibilities

• Operate and manage security incidents and requests to SLA guidelines, acting as an intermediate escalation point for complex investigations.
• Monitor, triage and investigate alerts across endpoints, cloud, identity, email and network telemetry, reviewing and escalating unusual event behavior.
• Lead structured incident response aligned to a recognized lifecycle, including containment, eradication, recovery, evidence preservation and digital forensic analysis as authorized.
• Triage and remediate phishing, vishing and impersonation attacks in a timely and efficient manner as the risk dictates.
• Configure and tune appropriate security parameters in monitoring systems and act as a technical point of escalation for alerted issues.
• Conduct proactive threat hunting and design/double-check detection rules mapped to MITRE ATT&CK.

Skills

Azure Sentinel

Security Operations

Incident management

Threat investigations

Education

Bachelor's degree in IT or Information Security

Tools

Microsoft 365 Defender

Microsoft Sentinel

Sigma

KQL

Job description

INSPYR Solutions is seeking a Senior Information Security Analyst to join our clients' global Security Operations (SOC) team. You will lead monitoring, detection and response activities, drive threat hunting, and improve detection capabilities across endpoints, cloud, identity, email and network telemetry.

The role focuses on incident response, detection engineering, and proactive threat hunting, reporting to the Information Security Manager.