Senior SOC Analyst - Threat Hunting & IR (Remote)

Maven Ventures; Washington (District of Columbia); Hybrid; USD 19,000 - 25,000; Full time

Job summary

Zoom's Security Operations Centre (SOC) in India seeks a security professional to detect, respond to, and recover from threats across a global technology environment. You will lead investigations end-to-end, collaborate with cloud, identity, and product security teams, and continuously improve detection capabilities and tooling.

The role emphasizes triage-to-resolution leadership, cross-team collaboration, and proactive improvements to playbooks, detections, and automation in a fast-moving

Qualifications

• 3 to 6 years of hands-on experience in SOC operations, incident response, or threat hunting.
• Practical experience with CrowdStrike NGSIEM (Falcon Next-Gen SIEM) and CrowdStrike EDR, including detection rule development, alert tuning, and host-level investigation.
• Proficiency with Splunk SIEM, including writing searches, building alerts, and supporting detection engineering workflows.
• Experience investigating email threats with Proofpoint Email Security and analyzing suspicious files and URLs using sandbox environments such as Joe Sandbox.
• Hands-on experience with at least two cloud platforms (AWS, Azure, GCP, or OCI) from a security monitoring perspective, and experience investigating identity-based threats in Okta logs.
• Working knowledge of PowerShell and Python for security scripting and automation, with a strong understanding of attacker techniques mapped to MITRE ATT&CK.
• Experience handling PSIRT cases or product security incidents, and strong written communication skills for incident documentation and stakeholder reporting.

Responsibilities

• Monitor and investigate security alerts across SIEM, EDR, and cloud.
• Lead incident response from triage to containment and recovery.
• Collaborate with Incident Response and Detection Engineering teams.
• Develop and tune detection rules to reduce false positives.
• Apply AI tools to accelerate incident analysis and reporting.
• Investigate phishing with Proofpoint and sandbox analysis.
• Analyze AWS, Azure, GCP, and OCI security events for misconfigurations.
• Read PowerShell and Python scripts and automate workflows.

Skills

CrowdStrike NGSIEM

CrowdStrike EDR

Splunk SIEM

Proofpoint

Okta logs

PowerShell

Python

MITRE ATT&CK

Incident response

Threat hunting

Threat intel

Tools

CrowdStrike NGSIEM

Splunk

Proofpoint

Joe Sandbox

Okta

AWS

Azure

GCP

Job description

Zoom's Security Operations Centre (SOC) in India seeks a security professional to detect, respond to, and recover from threats across a global technology environment. You will lead investigations end-to-end, collaborate with cloud, identity, and product security teams, and continuously improve detection capabilities and tooling.

The role emphasizes triage-to-resolution leadership, cross-team collaboration, and proactive improvements to playbooks, detections, and automation in a fast-moving