Senior SOC Analyst - Incident Response & Threat Hunting

Alteryx; United States; Remote; USD 139,000 - 151,000; Full time

Benefits offered by this job

Benefits and compensation package

Bonus or commission potential

Job summary

Alteryx is seeking a Senior Security Operations Center (SOC) Analyst in the United States to triage, investigate, and respond to security incidents across on‑prem and multi‑cloud environments. You will lead incident communications, coordinate containment with IT and engineering, and drive improvements in detection content and response workflows.

The role emphasizes cloud and forensics capabilities, with responsibilities spanning threat hunting, correlation rules, and cross‑team collaboration.

Qualifications

• Bachelor’s degree or equivalent in computer science or related field.
• 4+ years of security operations / incident response experience.
• Strong knowledge of SIEM / log management platforms and ability to query telemetry.
• Experience with cloud security and cloud-native security services.
• Hands-on scripting experience (Python/PowerShell) to support investigations.
• Excellent written and verbal communication skills.

Responsibilities

• Triage and respond to security alerts and incidents across on-prem and multi-cloud environments.
• Lead incident communications and stakeholder updates.
• Coordinate containment and remediation with IT, Cloud/Platform, and Engineering teams.
• Document incident timelines, evidence collected, hypotheses tested, IOCs, and lessons learned.
• Conduct threat hunts mapped to MITRE ATT&CK.
• Translate hunt findings into detections, playbooks, and telemetry improvements.
• Develop, tune, and maintain detection content to reduce false positives.
• Validate detections with testing and retrospective analysis.
• Collaborate with stakeholders to define monitoring and use cases for risk reduction.
• Perform basic endpoints and/or cloud forensics during escalations.
• Support malware triage and artifact analysis as needed.
• Investigate cloud threats using AWS/Azure/GCP signals.
• Partner with Cloud/Platform teams to improve telemetry coverage and remediation.
• Participate in on-call rotation for 24x7 incident response.

Skills

Security operations

Incident response

SIEM / log management

Cloud security

Scripting

Communication

Analytical thinking

Education

Bachelor’s degree in computer science or related field

Master’s degree a plus

Tools

Microsoft Sentinel

Splunk

ELK

Cloud-native security services

Job description

Alteryx is seeking a Senior Security Operations Center (SOC) Analyst in the United States to triage, investigate, and respond to security incidents across on‑prem and multi‑cloud environments. You will lead incident communications, coordinate containment with IT and engineering, and drive improvements in detection content and response workflows.

The role emphasizes cloud and forensics capabilities, with responsibilities spanning threat hunting, correlation rules, and cross‑team collaboration.