Senior SOC Lead: Incident Response & Detection Automation

Pearson; Dover (DE); Hybrid; USD 110.000 - 170.000; Vollzeit

Zusammenfassung

Pearson’s Security Operations Center (SOC) in Durham (Hybrid) is seeking a Senior Security Analyst to lead day-to-day security operations, drive improvements, and advance detection engineering across Pearson environments. You will respond to incidents, automate responses, and collaborate with global partners to protect critical assets.

The role requires 4+ years in security operations, hands-on experience with SOAR, EDR, NDR, and SIEM, and strong stakeholder communication to translate risk into

Qualifikationen

• Experience in regulated environments or government clients.
• 4+ years in security operations, incident response, and detection engineering.
• Hands-on with SOAR, EDR, NDR, and SIEM.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).
• Strong multitasking and communication to translate risk to non-technical audiences.

Aufgaben

• Lead advanced SOC operations including incident detection, triage, containment, and root cause analysis.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously assess and enhance SOC processes and procedures.
• Collaborate with threat intelligence teams to analyze emerging risks and integrate relevant TTPs into SOC operations.
• Act as a trusted advisor to internal stakeholders, translating technical findings into actionable insights.
• Ensure all SOC activities comply with standards and Pearson policies.
• Deliver executive-level reporting, risk assessments, and metrics to demonstrate SOC effectiveness.

Kenntnisse

Incident response

Security operations

Detection engineering

Automation

Stakeholder management

Communication

Tools

SOAR

EDR

NDR

SIEM

AWS

Azure

GCP

Jobbeschreibung

Pearson’s Security Operations Center (SOC) in Durham (Hybrid) is seeking a Senior Security Analyst to lead day-to-day security operations, drive improvements, and advance detection engineering across Pearson environments. You will respond to incidents, automate responses, and collaborate with global partners to protect critical assets.

The role requires 4+ years in security operations, hands-on experience with SOAR, EDR, NDR, and SIEM, and strong stakeholder communication to translate risk into