Senior SOC Analyst: IR, Threat Hunting & Forensics

We Are EXOS; Indianapolis (IN); On-site; USD 120,000 - 160,000; Full time

Job summary

EXOS is seeking a Cybersecurity Analyst III to act as the senior escalation point in the SOC, owning incidents end-to-end across client environments. You will drive advanced detection, incident response, and threat hunting, mentoring Tier 1/2 and shaping detection strategies with engineering.

This hands-on senior role requires deep technical expertise and leadership across multiple clients. You will lead proactive hunts, conduct forensics, and partner on MITRE ATT&CK alignment, while producing

Qualifications

• 5+ years of SOC/IR/MSSP or equivalent experience.
• Ability to independently lead complex investigations to resolution.
• Advanced command of EDR and SIEM for detections and analysis.
• Proactive threat hunting with hypothesis-driven approaches.
• Strong tooling for forensics, incident response, and evidence preservation.
• Proficient in PowerShell and/or Python for automation.
• Working knowledge of MITRE ATT&CK framework.
• Solid incident response lifecycle and documentation skills.
• Clear client-facing reporting and mentorship ability.
• Fundamentals of TCP/IP, DNS, HTTP/S, Windows/Linux internals.

Responsibilities

• Serve as Tier 3 escalation point; drive incidents to definitive resolution.
• Lead end-to-end true-positive incidents across client environments.
• Own proactive threat hunting program; develop reusable detections.
• Perform host, memory, and network forensics to support breach-notification.
• Conduct phishing triage and email threat investigations.
• Partner on detection strategy and MITRE ATT&CK mapping.
• Translate attacker TTPs into detections; support purple-team activities.
• Analyze telemetry to identify suspicious activity and lead investigations.
• Set investigation quality standards; onboard Tier 1/2 analysts.
• Author analytical narratives for client deliverables and reports.
• Drive SOC maturity by shaping playbooks and workflows; mentor team.

Skills

SOC experience

Investigation leadership

Threat hunting

EDR proficiency

Forensics

Scripting (PowerShell/Python)

MITRE ATT&CK

IR lifecycle

Documentation

Networking basics

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

SentinelOne

CrowdStrike

Defender for Endpoint

Blumira

Splunk

QRadar

Velociraptor

Entra ID

Job description

EXOS is seeking a Cybersecurity Analyst III to act as the senior escalation point in the SOC, owning incidents end-to-end across client environments. You will drive advanced detection, incident response, and threat hunting, mentoring Tier 1/2 and shaping detection strategies with engineering.

This hands-on senior role requires deep technical expertise and leadership across multiple clients. You will lead proactive hunts, conduct forensics, and partner on MITRE ATT&CK alignment, while producing