Senior SOC Lead: Detection & Incident Response (Hybrid)

Pearson; Madison (WI); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Pearson's Security Operations Center is seeking a Senior Security Analyst to lead day-to-day SOC operations, drive automation, and advance detection engineering across Pearson environments. This role is pivotal for rapid incident response and collaboration with internal and external partners to safeguard critical assets.

You will refine SOC processes, develop detection logic and playbooks, and deliver executive-level reporting on security risks and program effectiveness in a hybrid, 24x7 capable

Qualifications

• Must have experience working with regulated environments or government clients.
• 4+ years in security operations, incident response, and detection engineering.
• Hands-on with SOAR, EDR, NDR, SIEM technologies.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).
• Strong multitasking and communication for stakeholder management and translating technical risk to non-technical audiences.

Responsibilities

• Lead and execute advanced SOC operations, including incident detection, triage, containment, and root cause analysis; on-call coverage for 24x7 operations.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and procedures.
• Collaborate with threat intelligence teams to analyze risks and integrate relevant TTPs into SOC operations.
• Act as trusted advisor to internal stakeholders, translating findings into actionable insights.
• Ensure SOC activities comply with standards (e.g., NCSC, Cyber Essentials Plus) and Pearson policies.
• Deliver executive-level reporting, risk assessments, and security metrics.

Skills

Security operations

Incident response

Detection engineering

SOAR

EDR

NDR

SIEM

Cloud security

Stakeholder management

Communication

Tools

SOAR

EDR

NDR

SIEM

Job description

Pearson's Security Operations Center is seeking a Senior Security Analyst to lead day-to-day SOC operations, drive automation, and advance detection engineering across Pearson environments. This role is pivotal for rapid incident response and collaboration with internal and external partners to safeguard critical assets.

You will refine SOC processes, develop detection logic and playbooks, and deliver executive-level reporting on security risks and program effectiveness in a hybrid, 24x7 capable