Senior SOC Lead – Detection & Incident Response

Pearson; Salt Lake City (UT); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Pearson's Security Operations Center is seeking a Senior Security Analyst to lead day-to-day security operations, drive continuous process improvement, and advance detection engineering across Pearson environments. This role requires rapid incident response, automation, and collaboration with internal and external partners on a hybrid schedule in Durham.

Responsibilities include leading incident detection, containment, and root cause analysis; developing detection logic and automated playbooks;

Qualifications

• Experience in regulated environments or government clients.
• 4+ years in security operations, incident response, and detection engineering.
• Hands-on with SOAR, EDR, NDR and SIEM technologies.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).
• Strong communication skills, especially for stakeholder management.

Responsibilities

• Lead advanced SOC operations, including incident detection, triage, containment, and root cause analysis with 24x7 on-call coverage.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and procedures.
• Collaborate with threat intelligence teams to integrate TTPs into SOC operations.
• Translate technical findings into actionable insights for internal stakeholders.
• Ensure SOC activities comply with standards and Pearson policies.

Skills

SOAR

EDR

NDR

SIEM

Cloud providers

Tools

AWS

Azure

GCP

Job description

Pearson's Security Operations Center is seeking a Senior Security Analyst to lead day-to-day security operations, drive continuous process improvement, and advance detection engineering across Pearson environments. This role requires rapid incident response, automation, and collaboration with internal and external partners on a hybrid schedule in Durham.

Responsibilities include leading incident detection, containment, and root cause analysis; developing detection logic and automated playbooks;