Senior SOC Analyst: Lead Incident Response & Automation

Core specialty; Cincinnati (OH); On-site; USD 105,000 - 145,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) match

Employee Assistance Plan

Health Savings Account

Flexible Spending Account

Wellness program

Job summary

Core Specialty seeks a Senior SOC Analyst to join its Security Operations Center in Cincinnati, onsite only. The role leads investigations, coordinates containment, and develops automation to improve detection and response.

Ideal candidates have 3+ years in SOC/IR, strong SIEM/EDR skills, and relevant certifications. The position emphasizes collaboration with IT and security engineering and ongoing playbook updates.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT or equivalent
• 3+ years of SOC operations, cybersecurity, or incident response
• Certifications such as GCIH, GCIA, CEH, CySA+, or CISSP
• Scripting (Python/PowerShell) for automation and SOC processes

Responsibilities

• Investigate escalated alerts and perform deep-dive analysis using SIEM/EDR
• Lead containment and remediation for escalated incidents
• Develop and tune SIEM use cases, rules, and EDR detection logic
• Design automation workflows to improve incident response
• Maintain and enhance SOC playbooks and SOPs
• Train L1 analysts and foster continuous learning
• Prepare incident reports, root cause analyses, and preventive recommendations
• Produce technical documentation including diagrams and timelines
• Collaborate with IT ops and security engineering to strengthen defenses

Skills

SOC operations

Incident response

Threat hunting

Automation

Mentoring

Documentation

Education

Bachelor's degree

Tools

SIEM platforms

EDR tools

Threat intel feeds

SQL/KQL

Job description

Core Specialty seeks a Senior SOC Analyst to join its Security Operations Center in Cincinnati, onsite only. The role leads investigations, coordinates containment, and develops automation to improve detection and response.

Ideal candidates have 3+ years in SOC/IR, strong SIEM/EDR skills, and relevant certifications. The position emphasizes collaboration with IT and security engineering and ongoing playbook updates.