Senior SOC Analyst - MDR & AI-Driven Response

Critical Start, Inc.; Washington (District of Columbia); On-site; USD 60,000 - 70,000; Full time

Benefits offered by this job

Competitive salary with bonus

Health benefits

Unlimited PTO

Parental and military leave

401(k) with match

Life insurance

Job summary

Critical Start, Inc. in Washington, DC is seeking a Senior Security Analyst to triage MDR alerts, analyze events, and guide incident response with strong technical proficiency across EDR and SIEM platforms.

You will act as SME for our MDR solution suite, create playbooks, review escalations, and communicate with clients during high-severity incidents while maintaining rigorous documentation and operational integrity.

Qualifications

• At least 6 months of SOC tenure or equivalent experience.
• Security+ certification or equivalent.

Responsibilities

• Initial triage of MDR alerts.
• Analyze events, alerts and threat intel data for investigations.
• Recommend and implement response actions with supervisor approval.
• Review post-investigation escalations for accuracy, protection actions, and grammar.
• Create playbooks, knowledge objects, and automations within the MDR SOAR platform.
• Navigate the ZTAP console and communicate with clients during high-severity incidents.
• Verify correct execution of console actions to ensure two-person integrity.

Skills

SOC experience

Security+ certification

EDR

SIEM

Playbooks

SOAR

Threat intel

MDR platform expertise

Microsoft Sentinel

Splunk

CrowdStrike Falcon

Tools

Microsoft Defender for Endpoint

CrowdStrike Falcon

Palo Alto Cortex XDR

VMware Enterprise Endpoint

Trend Micro Vision One

Microsoft Defender Suite

Microsoft Sentinel

Splunk

Devo

Job description

Critical Start, Inc. in Washington, DC is seeking a Senior Security Analyst to triage MDR alerts, analyze events, and guide incident response with strong technical proficiency across EDR and SIEM platforms.

You will act as SME for our MDR solution suite, create playbooks, review escalations, and communicate with clients during high-severity incidents while maintaining rigorous documentation and operational integrity.