Senior SOC Analyst - Threat Detection & Response (Hybrid)

FlexTrade; Village of Great Neck (NY); Ibrido; USD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work schedule

Professional development budget

Comprehensive benefits

Descrizione del lavoro

FlexTrade Systems, a leading provider of multi-asset trading solutions, seeks a Senior SOC Analyst to own day-to-day detection, analysis, and response within our Security Operations Center. You will work across SIEM, EDR, and cloud platforms, collaborating with IT and engineering to harden defenses.

The role emphasizes hands-on execution, threat hunting, and purple team activities, with hybrid schedule (four days onsite, one remote day per week).

Competenze

• 5+ years in a SOC, security operations, or IR role.
• Proficient with SIEMs such as Splunk, Microsoft Sentinel, or Sumo Logic.
• Hands-on with EDRs like CrowdStrike Falcon or Defender.
• Experience configuring conditional access policies (Entra).
• Experience configuring DLP policies (Purview).
• Strong understanding of MITRE ATT&CK and threat detection.

Mansioni

• Monitor and investigate security alerts across SIEM, EDR, NDR, and cloud platforms.
• Lead end-to-end incident response including containment and recovery.
• Develop and maintain incident response playbooks and runbooks.
• Perform vulnerability assessments and prioritize remediation.
• Map detections to MITRE ATT&CK and tune SIEM rules.
• Conduct threat hunting and report findings to teams.
• Collaborate with IT/engineering to reduce false positives.

Conoscenze

SOC experience

SIEM (Splunk)

EDR (CrowdStrike)

Entra CA policies

DLP policies (Purview)

Threat detection

MITRE ATT&CK

Python scripting

Log analysis

Communication skills

Strumenti

Splunk

Microsoft Sentinel

Sumo Logic

CrowdStrike Falcon

Entra

Purview

Descrizione del lavoro

FlexTrade Systems, a leading provider of multi-asset trading solutions, seeks a Senior SOC Analyst to own day-to-day detection, analysis, and response within our Security Operations Center. You will work across SIEM, EDR, and cloud platforms, collaborating with IT and engineering to harden defenses.

The role emphasizes hands-on execution, threat hunting, and purple team activities, with hybrid schedule (four days onsite, one remote day per week).