Senior SOC Analyst: Incident Response & Threat Hunting

Alteryx Inc.; Northern (KY); Hybrid; USD 139,000 - 151,000; Full time

Benefits offered by this job

Bonus or commission

Medical benefits

Retirement plan

Time off

Employee discounts

Job summary

Alteryx is seeking a Senior Security Operations Analyst in the United States to join the SOC team protecting Alteryx products, infrastructure, and applications. You will triage alerts, lead incident response, and improve detection across endpoints, identity, SaaS, and multi-cloud environments (AWS, Azure, GCP).

The role emphasizes forensics, threat hunting, and detection engineering, with on-call responsibilities and collaboration with IT, Cloud/Platform, and Engineering to close gaps and drive

Qualifications

• Bachelor’s degree in computer science or related field (or equivalent experience/training).
• A master’s degree is a plus.
• 4+ years of relevant security operations / incident response experience.
• Strong understanding of the security incident management lifecycle and operational response practices.
• Strong experience with SIEM/log management platforms (e.g., Microsoft Sentinel, Splunk, ELK, Snowflake-based analytics, or similar).
• Ability to analyze and interpret security-relevant data including security event logs, system logs, application logs, cloud logs, and device logs.
• Hands-on investigation experience using cloud-native security services (e.g., AWS Security Hub, Defender for Cloud, GCPSC) and cloud logs.
• Experience with scripting languages (Python, PowerShell, shell).
• Strong written and verbal communication skills including clear ticket documentation and stakeholder updates.
• Excellent analytical and problem-solving skills with a bias toward action.

Responsibilities

• Triage and respond to security alerts and incidents across on-prem and multi-cloud environments, leading in-depth investigations using SIEM, EDR, cloud logs, identity telemetry, and network data.
• Lead incident communications with stakeholders and executives when needed.
• Coordinate containment and remediation with IT, Cloud/Platform, and Engineering teams; escalate when necessary.
• Produce incident documentation with timelines, evidence, hypotheses, IOCs, actions, and lessons learned.
• Conduct hypothesis-driven threat hunts mapped to common adversary behaviors (e.g., ATT&CK).
• Translate hunt findings into detections, playbooks, and telemetry improvements.
• Develop, tune, and maintain detection content (rules, analytics, alert logic).
• Validate detections via testing and retrospective analysis; improve alert fidelity and response workflows.
• Collaborate with stakeholders to define monitoring and detection use cases to reduce risk.
• Perform basic endpoints/cloud forensics during escalated incidents and preserve evidence.

Skills

SIEM

Incident response

Cloud security

Python scripting

Communication

Education

Bachelor’s degree in computer science or related field

Master’s degree

Tools

Microsoft Sentinel

Splunk

ELK

Cloud security services

Job description

Alteryx is seeking a Senior Security Operations Analyst in the United States to join the SOC team protecting Alteryx products, infrastructure, and applications. You will triage alerts, lead incident response, and improve detection across endpoints, identity, SaaS, and multi-cloud environments (AWS, Azure, GCP).

The role emphasizes forensics, threat hunting, and detection engineering, with on-call responsibilities and collaboration with IT, Cloud/Platform, and Engineering to close gaps and drive