Senior SOC Analyst: Incident Response & Threat Hunting

LEN Lennar Corporation; Irving (TX); Sur place; USD 140 000 - 180 000; Plein temps

Avantages offerts par ce poste

Health insurance

401(k) plan

Paid parental leave

Adoption assistance

Vacation and holidays

Résumé du poste

Lennar is seeking a Senior SOC Analyst to lead advanced incident response efforts, coordinate with our MDR partner, and drive threat detection improvements across SIEM/EDR/cloud platforms. You will develop playbooks, perform threat hunts, and automate SOC processes to reduce response times.

Ideal candidates have 5–7 years in cybersecurity ops, strong certification background (Security+, CISSP, GCIA), and hands-on experience with Microsoft Sentinel and XDR tools.

Qualifications

• 5–7 years in a cybersecurity operations role with Tier 2/3 experience.
• Proven incident response triage, investigation and remediation.
• Experience with SIEM/SOAR tools, including Microsoft Defender XDR and Cortex XDR.
• Strong ability to author and tune detection content and produce actionable remediation.

Responsabilités

• Lead investigations of complex high-severity security incidents from detection to containment.
• Coordinate with internal teams and MDR partner; act as Tier 3 escalation point.
• Develop and maintain incident response playbooks and runbooks.
• Conduct threat hunting across endpoint, identity, network, and cloud telemetry.
• Automate repetitive SOC processes using SOAR, Logic Apps, and playbooks.
• Monitor logs across SIEM/EDR/cloud platforms and correlate data for threats.
• Mentor Tier 1/2 analysts and generate executive-level SOC reports.

Connaissances

Incident response

Threat management

MDR partner coordination

SOAR automation

Threat hunting

KQL

Python

PowerShell

Microsoft Sentinel

XDR (Palo Alto Cortex/XDR)

ServiceNow

MITRE ATT&CK

Mentorship

Reporting

Formation

CompTIA Security+

CISSP

GCIA

Outils

Torq

Microsoft Sentinel Automation Rules

Logic Apps

Azure AD/AWS logs

Description du poste

Lennar is seeking a Senior SOC Analyst to lead advanced incident response efforts, coordinate with our MDR partner, and drive threat detection improvements across SIEM/EDR/cloud platforms. You will develop playbooks, perform threat hunts, and automate SOC processes to reduce response times.

Ideal candidates have 5–7 years in cybersecurity ops, strong certification background (Security+, CISSP, GCIA), and hands-on experience with Microsoft Sentinel and XDR tools.