Senior SOC Analyst II: Incident Response & Detection

SRI Resources; Irving (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

SRI Resources is seeking a SOC Analyst II for an on-site, multi-month contract in Irving, TX. You will escalate, investigate, and lead containment for complex incidents, while developing detections and playbooks and mentoring junior staff.

The role requires strong SIEM/EDR experience, knowledge of Windows/Linux, and the ability to collaborate with cross-functional teams to restore operations and strengthen defenses.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field, or equivalent experience.
• 3-5 years of experience in security operations, incident response, or related cybersecurity role, including at least 2 years as a SOC analyst.
• Hands-on experience investigating incidents using SIEM and EDR platforms, including writing search queries (e.g., Splunk SPL).
• Solid understanding of Windows and Linux operating systems, Active Directory, and common log sources such as Windows Event Logs, Sysmon, firewall, and proxy logs.
• Experience applying MITRE ATT&CK to investigations and detection development.
• Ability to lead response for medium- and high-severity incidents and communicate with stakeholders.
• Experience scripting or automation tools such as PowerShell, Python, or XQL for Cyber defense operations.
• Ability to develop and execute queries and scripts for log analysis and detection validation.

Responsibilities

• Investigate escalated alerts and incidents as the primary escalation point for Level 1 analysts.
• Lead containment, eradication, and recovery for medium- and high-severity incidents.
• Develop new detection rules and correlation searches mapped to MITRE techniques.
• Mentor Level 1 analysts and contribute to SOPs, playbooks, and runbooks.
• Create incident reports detailing root cause, actions taken, and recommendations.

Skills

Incident response

Root cause analysis

Communication skills

Scripting: PowerShell

Splunk SPL

Education

Bachelor's degree in Cybersecurity or related

Tools

Splunk ES

Palo Alto Cortex

Cortex XSOAR

ServiceNow

Jira

Job description

SRI Resources is seeking a SOC Analyst II for an on-site, multi-month contract in Irving, TX. You will escalate, investigate, and lead containment for complex incidents, while developing detections and playbooks and mentoring junior staff.

The role requires strong SIEM/EDR experience, knowledge of Windows/Linux, and the ability to collaborate with cross-functional teams to restore operations and strengthen defenses.