Senior SOC Lead: Incident Response (Remote)

Deep Seas; San Diego (CA); Remote; USD 140,000 - 170,000; Full time

Job summary

DeepSeas is seeking a Senior SOC Analyst (L2) to drive client‑facing detection and response outcomes. You will lead high‑severity incidents, mentor L1/L2 analysts, and turn findings from threat hunting, malware analysis, and forensics into stronger detections and playbooks.

You will leverage MITRE ATT&CK, SIEM/EDR/SOAR tools, and scripting to automate tasks, while collaborating with threat intel and vulnerability teams to stay ahead of threats and improve detection coverage.

Qualifications

• 5+ years in security operations or incident response, including senior leadership.

Responsibilities

• Leads and mentors L1/L2 incident responders during security incidents.
• Coordinates with stakeholders during high-severity incidents.
• Develops and tests incident response playbooks.
• Conducts advanced threat hunting to detect sophisticated adversaries.
• Collaborates with threat intel and vulnerability teams to stay current on threats.
• Provides guidance in root cause analysis and post-incident reviews.
• Develops and tunes detection rules to improve threat detection.
• Uses MITRE ATT&CK to classify threat actor TTPs.
• Drives continuous SOC improvement and reports trends to leadership.
• Conducts leadership briefings on incidents and trends.

Skills

Incident response leadership

Threat hunting

SIEM/EDR/XDR proficiency

Detection content tuning (KQL / SPL /

MITRE ATT&CK knowledge

Forensics (host/memory/network)

Scripting (Python/PowerShell/Bash)

Mentoring juniors

Excellent communication

US citizenship / residence in US

Education

Bachelor's degree in Cybersecurity/Computer Science

Certifications: GCIH, GCFA, GREM, GNFA, OSCP, CISSP

Tools

KQL

SPL

Sigma

YARA

Ghidra

IDA Pro

Volatility

Wireshark

Job description

DeepSeas is seeking a Senior SOC Analyst (L2) to drive client‑facing detection and response outcomes. You will lead high‑severity incidents, mentor L1/L2 analysts, and turn findings from threat hunting, malware analysis, and forensics into stronger detections and playbooks.

You will leverage MITRE ATT&CK, SIEM/EDR/SOAR tools, and scripting to automate tasks, while collaborating with threat intel and vulnerability teams to stay ahead of threats and improve detection coverage.