Senior SOC Analyst - Onsite, Automation & Incident Response

corespecialtyinsurance; Dallas (TX); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) company match

Employee Assistance Plan

Health Savings Account

Flexible Spending Account

Health Reimbursement Account

Wellness program

Job summary

Core Specialty is seeking a Senior SOC Analyst (Level 2/3) to join our Security Operations Center onsite in Cincinnati, Monday–Friday. You will investigate escalated alerts, lead containment, and design automation to improve incident response across multiple environments.

The role requires 3+ years in SOC, relevant certifications, scripting ability, and cloud security monitoring experience. On-site work only; strong documentation and collaboration skills are essential.

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity/CS/IT.
• 3+ years in SOC operations, cybersecurity, or incident response.
• Certifications such as GCIH, GCIA, CEH, CySA+, or CISSP.
• Experience with malware analysis or reverse engineering.
• Experience with scripting (Python/PowerShell) for automation.
• Familiarity with threat intelligence platforms and integration.
• Experience in cloud security monitoring (AWS, Azure, GCP).

Responsibilities

• Investigate escalated alerts and perform deep-dive forensic analysis using SIEM, EDR, and threat intel tools.
• Lead containment and remediation for incidents across environments.
• Develop and tune SIEM use cases, correlation rules, and EDR detection logic.
• Design automation workflows to enhance incident response and investigation.
• Leverage AI platforms to automate SOC processes.
• Conduct proactive hunts using behavioral analytics and intelligence feeds.
• Collaborate with IT, network, and security teams to contain incidents.
• Maintain and enhance SOC playbooks, runbooks, and SOPs.
• Prepare detailed incident reports and root-cause analyses.
• Train L1 analysts and promote continuous learning.
• Recommend new security technologies or measures.
• Maintain endpoint security baselines aligned with CIS.
• Support integration of a new primary EDR/SIEM platform.
• Test and deploy endpoint security changes with IT operations.
• Act as senior escalation point during incidents.
• Contribute to incident response playbooks and post-incident reviews.
• Produce high-quality documentation: diagrams, SOPs, policies, timelines.

Skills

SIEM tuning

EDR experience

Threat intelligence

SQL/KQL

MITRE ATT&CK

Incident response

Scripting (Python/PowerShell)

Cloud security monitoring

Documentation

On-call

Education

Bachelor's degree in Cybersecurity/CS/IT

Job description

Core Specialty is seeking a Senior SOC Analyst (Level 2/3) to join our Security Operations Center onsite in Cincinnati, Monday–Friday. You will investigate escalated alerts, lead containment, and design automation to improve incident response across multiple environments.

The role requires 3+ years in SOC, relevant certifications, scripting ability, and cloud security monitoring experience. On-site work only; strong documentation and collaboration skills are essential.