Senior SOC Lead: Incident Response & Detection Engineering

Pearson; Santa Fe (NM); Sur place; USD 150 000 - 230 000; Plein temps

Résumé du poste

Pearson is seeking a Senior Director of Security Operations to lead the SOC, drive detection engineering, and streamline incident response across Pearson environments. The role emphasizes automation, collaboration with partners, and governance alignment with security standards.

The candidate should have 4+ years in security operations, hands-on experience with SOAR/EDR/NDR/SIEM, and cloud proficiency (AWS/Azure/GCP). On-call coverage and risk reporting to executives are expected.

Qualifications

• Experience in regulated environments or government clients.
• 4+ years in security operations, incident response and detection engineering.
• Hands-on with SOAR, EDR, NDR and SIEM technologies.
• Experience with one or more Cloud Service Providers (AWS, Azure, GCP).
• Strong multitasking and stakeholder communication skills.

Responsabilités

• Lead and execute advanced SOC operations, including incident detection, triage, containment, and root cause analysis.
• Develop, implement, and optimize detection logic, playbooks, and automated response workflows.
• Continuously improve SOC processes and procedures to match evolving threat landscape.
• Collaborate with threat intel to incorporate TTPs into operations.
• Translate technical findings to actionable insights for stakeholders and leadership.
• Ensure SOC activities comply with standards and Pearson policies.
• Deliver executive-level reporting, risk assessments and metrics.

Connaissances

Security operations

Incident response

Detection engineering

Cloud security

Stakeholder communication

Outils

SOAR

EDR

NDR

SIEM

AWS

Azure

GCP

Description du poste

Pearson is seeking a Senior Director of Security Operations to lead the SOC, drive detection engineering, and streamline incident response across Pearson environments. The role emphasizes automation, collaboration with partners, and governance alignment with security standards.

The candidate should have 4+ years in security operations, hands-on experience with SOAR/EDR/NDR/SIEM, and cloud proficiency (AWS/Azure/GCP). On-call coverage and risk reporting to executives are expected.