Senior SOC Analyst: Threat Hunting & Automation Lead

Core Specialty Insurance Services, Inc.; Cincinnati (OH); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Short and long-term disability

401(k) with company match

Employee Assistance Plan

Health Savings Account

Flexible Spending Account

Wellness program

Job summary

Core Specialty Insurance Services, Inc. is seeking a Senior SOC Analyst (Level 2/3) to join our Security Operations Center in Cincinnati. This onsite role leads investigations, mentors L1 analysts, and drives detection and response improvements in a 24/7 environment.

You will validate threats, develop SIEM rules, and design automation to accelerate incident response, while coordinating with IT and security teams for containment and remediation. Bachelor’s degree and 3+ years in SOC are required.

Qualifications

• 3+ years of experience in SOC operations, cybersecurity, or incident response.
• Bachelor's degree in Cybersecurity, Computer Science, IT, or equivalent practical experience.
• Certifications such as GCIH, GCIA, CEH, CompTIA CySA+, or CISSP.

Responsibilities

• Investigate escalated alerts and perform deep-dive forensic analysis using SIEM, EDR, and threat intel tools.
• Lead containment and remediation efforts for escalated incidents across environments.
• Develop and tune SIEM use cases, correlation rules, and EDR detection logic to improve SOC efficiency.
• Design and implement automation workflows to enhance incident response and investigation efforts.
• Leverage AI platforms to assist with automation of SOC processes.
• Conduct proactive hunts leveraging behavioral analytics and intelligence feeds to identify threats.
• Work with IT, network, and security teams to contain incidents and strengthen defenses.
• Maintain and enhance SOC playbooks, runbooks, and SOPs.
• Prepare detailed incident reports, root cause analyses, and preventive recommendations.
• Train L1 analysts and foster continuous learning.
• Assess new security technologies or measures to enhance SOC capabilities.
• Maintain endpoint security baselines aligned with CIS benchmarks.
• Support integration and operations of a new primary EDR/SIEM platform.
• Test and deploy endpoint security changes in coordination with IT operations.
• Act as a senior escalation point during security incidents.
• Contribute to incident response playbooks and post-incident reviews.
• Produce high-quality documentation: architecture diagrams, SOPs, runbooks, policy rationales, audit artifacts, timelines.

Skills

SIEM

EDR

Threat intel

SQL

KQL

MITRE ATT&CK

Cyber Kill Chain

Python

PowerShell

Cloud security monitoring

Education

Bachelor's degree in Cybersecurity, Computer Science, IT

Tools

Threat intelligence platforms

EDR platforms

SIEM platforms

Job description

Core Specialty Insurance Services, Inc. is seeking a Senior SOC Analyst (Level 2/3) to join our Security Operations Center in Cincinnati. This onsite role leads investigations, mentors L1 analysts, and drives detection and response improvements in a 24/7 environment.

You will validate threats, develop SIEM rules, and design automation to accelerate incident response, while coordinating with IT and security teams for containment and remediation. Bachelor’s degree and 3+ years in SOC are required.