Senior SOC Analyst | Hybrid, Hands-On Incident Response

FlexTrade; Milwaukee (WI); Hybrid; USD 110,000 - 140,000; Full time

Job summary

FlexTrade Systems, Inc. is seeking a Senior SOC Analyst to join our cybersecurity team. You will own day-to-day detection, analysis, and response activities while supporting vulnerability management and purple team exercises.

This hands-on role emphasizes execution over management, collaborating with IT and engineering to reduce risk. The position is primarily on-site (4 days/week) with one remote day per week, offering a hybrid work model and opportunities to work with diverse security

Qualifications

• 5+ years in a SOC, security operations, or incident response.
• Proficiency with SIEM platforms (Splunk, Sentinel, Sumo Logic).
• Hands-on with EDR (CrowdStrike Falcon or Defender).
• Experience configuring conditional access policies in Entra.
• Experience with vulnerability management processes.
• Strong log analysis across endpoints, networks, cloud, SaaS.
• Knowledge of MITRE ATT&CK framework.
• Scripting ability (Python/PowerShell/Bash).

Responsibilities

• Monitor, triage, and investigate alerts across SIEM/EDR/NDR and cloud platforms.
• Respond to incidents end-to-end: triage, containment, eradication, recovery, documentation.
• Develop and maintain incident response playbooks and runbooks.
• Conduct root cause analysis and contribute to post-incident reviews.
• Produce clear incident reports for technical and non-technical audiences.
• Participate in on-call rotation to respond to high-severity incidents.
• Perform vulnerability scans and assess using CVSS and threat intel.
• Track remediation progress with IT and engineering teams.

Skills

SOC experience

SIEM proficiency

EDR expertise

Conditional access

DLP knowledge

Vulnerability mgmt

Networking basics

Log analysis

MITRE ATT&CK

Scripting

Tools

Splunk

Microsoft Sentinel

Sumo Logic

CrowdStrike Falcon

Microsoft Defender

Entra CA

Purview

Job description

FlexTrade Systems, Inc. is seeking a Senior SOC Analyst to join our cybersecurity team. You will own day-to-day detection, analysis, and response activities while supporting vulnerability management and purple team exercises.

This hands-on role emphasizes execution over management, collaborating with IT and engineering to reduce risk. The position is primarily on-site (4 days/week) with one remote day per week, offering a hybrid work model and opportunities to work with diverse security