Senior SOC Lead: Threat Detection & Incident Response

Lennar; Miami (FL); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid parental leave

Education assistance

Adoption assistance

Vacation and holidays

Personal days

Home purchase discounts

Job summary

Lennar seeks a Senior SOC Analyst to lead incident response, threat hunting, and security operations in a high-demand environment. You will coordinate with our MDR partner to rapidly detect, contain, and remediate threats across endpoints, identities, networks, and cloud services.

You will develop playbooks, automate routine tasks in a SOAR environment, and mentor junior analysts while communicating security posture to stakeholders.

Qualifications

• 5–7 years in a cybersecurity operations role, with at least 3 years in a Tier 2/Tier 3 SOC or escalation capacity.
• Proven experience leading incident response triage, investigation, and remediation, including working directly with MDR partners.
• In-depth knowledge of security tools and technologies, including SIEM/SOAR platforms (e.g., Microsoft Sentinel), endpoint detection and response solutions (e.g., Microsoft Defender XDR, Palo Alto Cortex XDR), and ticketing systems (e.g., ServiceNow).

Responsibilities

• Lead investigations of complex, high severity security incidents from detection through containment, remediation, and recovery, coordinating across internal teams and the MDR partner.
• Act as the primary escalation point for Tier 3 alerts and incidents and perform root cause analysis with actionable remediation plans.
• Serve as the primary liaison to the MDR provider: validate and triage MDR alerts, ensure alignment on response protocols and escalation procedures, and provide tuning recommendations to improve detection fidelity.
• Develop and maintain incident response playbooks, runbooks, and workflows.
• Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into improved defenses and detection content.

Skills

SOC analyst

Incident response

MDR coordination

SIEM/SOAR

Microsoft Sentinel

Defender XDR

Cortex XDR

ServiceNow

KQL

Threat hunting

Automation

Python

PowerShell

MITRE ATT&CK

Cloud telemetry

Tools

Microsoft Sentinel

Palo Alto Cortex XDR

Torq

Logic Apps

Automation Rules

ServiceNow

Job description

Lennar seeks a Senior SOC Analyst to lead incident response, threat hunting, and security operations in a high-demand environment. You will coordinate with our MDR partner to rapidly detect, contain, and remediate threats across endpoints, identities, networks, and cloud services.

You will develop playbooks, automate routine tasks in a SOAR environment, and mentor junior analysts while communicating security posture to stakeholders.