Senior SOC Lead: Incident Response & Threat Hunting

Emploive; Northern (KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

DeepSeas is seeking a Senior SOC Analyst (L2) to drive the quality of client-facing detection and response. You will lead high-severity investigations, mentor L1/L2 analysts, and convert threat-hunting, malware analysis, and forensics findings into stronger detections and playbooks.

You’ll balance strategic thinking with hands-on technical work, maintain awareness of evolving threats, and ensure operational execution across incident response, with a focus on delivering measurable improvements

Qualifications

• 5+ years in security operations or incident response, including leading investigations.
• Proven experience handling high-severity incidents and driving containment, eradication and recovery.
• Hands-on proficiency with SIEM, EDR/XDR, and SOAR; adept at writing and tuning detection content (e.g., KQL, SPL, Sigma, YARA).
• Familiarity with MITRE ATT&CK and the incident response lifecycle (NIST SP 800-61).
• Experience with host, memory, and network forensics and malware analysis.
• Scripting proficiency in Python, PowerShell, or Bash to automate tasks.

Responsibilities

• Lead a team of L1/L2 responders during security incidents.
• Coordinate with stakeholders during high-severity incidents.
• Develop, test, and refine IR playbooks and procedures.
• Conduct advanced threat hunting to detect sophisticated adversaries.
• Collaborate with threat intel and vulnerability teams on emerging threats.
• Provide guidance on root cause analysis and post-incident reviews.
• Develop and tune detection rules to improve threat detection.
• Produce metrics and leadership briefings on IR activity.

Skills

Incident response leadership

Threat hunting

Malware analysis

Written and verbal communication

Scripting (Python/PowerShell/Bash)

Education

Bachelor's degree in Cybersecurity, CS or related field

Advanced cybersecurity certifications (GCIH/GCFA/GREM/GNFA/OSCP/CISSP)

Tools

SIEM

EDR/XDR

SOAR

MITRE ATT&CK

KQL

SPL

Sigma

YARA

Ghidra

IDA Pro

Volatility

x64dbg

Job description

DeepSeas is seeking a Senior SOC Analyst (L2) to drive the quality of client-facing detection and response. You will lead high-severity investigations, mentor L1/L2 analysts, and convert threat-hunting, malware analysis, and forensics findings into stronger detections and playbooks.

You’ll balance strategic thinking with hands-on technical work, maintain awareness of evolving threats, and ensure operational execution across incident response, with a focus on delivering measurable improvements