Senior SOC & Incident Response Lead (Hybrid Remote)

Layer8security; Northern (KY); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Life insurance

Unlimited vacation

Professional development

Employee voice

Job summary

Layer 8 Security is seeking a Senior Cybersecurity Consultant to lead our Security Operations practice. This hands-on, client-facing role requires guiding SOC operations, mentoring analysts, and delivering incident response engagements across a diverse client portfolio.

You will deploy and optimize EDR/XDR and SIEM platforms, coordinate cross-functional response activities, and present risk-based recommendations to executives. Hybrid work with travel to client sites.

Qualifications

• Senior cybersecurity leader with hands-on blue-team experience.
• Experience guiding SOC operations across multiple clients.
• Proven ability to mentor analysts and drive incident response programs.

Responsibilities

• Lead SOC analysts with day-to-day direction and performance guidance.
• Develop and optimize SOC workflows, escalation procedures, and response playbooks.
• Serve as technical escalation point for complex incidents and client inquiries.
• Manage EDR/XDR deployments across diverse client environments.
• Lead end-to-end incident response engagements from triage to post-incident review.
• Produce incident documentation including RCA and remediation roadmaps.
• Deliver security awareness training tailored to client workforce profiles.

Skills

SOC leadership

Incident response

Threat detection

Education

Industry certifications (CISSP, GCIH, GCIA, CEH, Security+)

Tools

EDR/XDR platforms (CrowdStrike, SentinelOne, Defender, Carbon Black)

SIEM solutions (Splunk, Defender, QRadar, Elastic)

Job description

Layer 8 Security is seeking a Senior Cybersecurity Consultant to lead our Security Operations practice. This hands-on, client-facing role requires guiding SOC operations, mentoring analysts, and delivering incident response engagements across a diverse client portfolio.

You will deploy and optimize EDR/XDR and SIEM platforms, coordinate cross-functional response activities, and present risk-based recommendations to executives. Hybrid work with travel to client sites.