Senior SOC Analyst – Onsite Incident Response & Automation

Core Specialty Insurance Holdings, Inc.; Cincinnati (OH); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401(k) Company match

Employee Assistance Plan

Health Savings Account

Flexible Spending Account

Wellness program

Job summary

Core Specialty Insurance Holdings, Inc. is seeking a Senior SOC Analyst to join the onsite Security Operations Center in Cincinnati (Mon–Fri).

The role leads investigations of complex security incidents, mentors L1 analysts, and drives improvements in detection, response, and automation in a fast-paced 24/7 environment. You will work with SIEM/EDR tools, tune detection logic, and develop automation workflows while coordinating with IT and security teams.

Qualifications

• 3+ years of experience in SOC operations, cybersecurity, or incident response.

Responsibilities

• Investigate escalated alerts, validate threats, and perform deep-dive forensic analysis using SIEM, EDR, and threat intelligence tools.
• Lead containment and remediation efforts for escalated incidents across multiple environments.
• Develop and tune SIEM use cases, correlation rules, and EDR detection logic to improve SOC efficiency.
• Design and implement automation workflows to enhance incidents response and investigation efforts.
• Leverage AI platforms to assist with automation of SOC processes.
• Conduct proactive hunts leveraging behavioral analytics and intelligence feeds to identify emerging threats.
• Work closely with IT, network, and security engineering teams to contain incidents and strengthen defenses.
• Maintain and enhance SOC playbooks, runbooks, and SOPs.
• Assist with preparation of detailed incident reports, root cause analyses, and recommendations for preventive measures.
• Train and guide L1 analysts, fostering a culture of continuous learning and operational excellence.
• Assess and recommend new security technologies or security measures to enhance SOC capabilities.
• Maintain endpoint security baselines aligned with CIS benchmarks.
• Support integration and operations of a new primary EDR/SIEM platform.
• Partner with IT operations to safely test and deploy endpoint security changes.
• Act as a senior technical escalation point during security incidents.
• Contribute to incident response playbooks and post-incident reviews.
• Produce high-quality technical documentation, including:

Skills

SOC operations

Incident response

Security automation

MITRE ATT&CK

SQL/KQL queries

Communication & documentation

Cloud security

Threat intel

Education

Bachelor’s degree in Cybersecurity, CS, IT, or equivalent

Tools

SIEM platforms

EDR tools

Python

PowerShell

Job description

Core Specialty Insurance Holdings, Inc. is seeking a Senior SOC Analyst to join the onsite Security Operations Center in Cincinnati (Mon–Fri).

The role leads investigations of complex security incidents, mentors L1 analysts, and drives improvements in detection, response, and automation in a fast-paced 24/7 environment. You will work with SIEM/EDR tools, tune detection logic, and develop automation workflows while coordinating with IT and security teams.