Senior SOC Threat Hunter & Incident Response Lead

Logicalis Group; Beachwood (OH); Hybrid; USD 78,000 - 100,000; Full time

Job summary

Logicalis is seeking a Security Senior Analyst to manage services for Managed Security Service customers. The role covers threat assessment, remediation direction, and Tier 3 analysis on complex incidents.

You will mentor teams, develop playbooks, and collaborate with clients, architects, and partners to maintain up-to-date security architectures. Responsibilities include incident management, alert triage, and sophisticated investigations across SIEM/EDR/XDR environments.

Qualifications

• 5+ years of experience in cybersecurity, including SOC, MSSP or mature security operations environments.
• Hands-on experience analyzing security logs from SIEM, EDR/XDR, endpoint, identity, cloud and network sources.
• Experience with Microsoft Sentinel and/or Splunk is highly valued.
• Experience with security automation/orchestration (SOAR), MISP, n8n is valued.
• Knowledge of ISO 27001, NIST, MITRE ATT&CK and common vulnerability management practices.

Responsibilities

• Handle internal and client escalations with key stakeholders.
• Lead on incident response investigations and containment of threats.
• Develop and maintain incident playbooks and SOPs for SOC operations.
• Mentor colleagues and drive service improvements and playbook evolution.
• Prepare detailed reports on investigations, findings and remediation guidance.

Skills

Cybersecurity experience

Threat hunting

Incident response

Executive communication

Education

Bachelor’s Degree in related field

Tools

Microsoft Sentinel

Splunk

Cisco XDR

Microsoft Defender

MISP

n8n

SOAR platforms

Azure security monitoring

AWS security monitoring

Job description

Logicalis is seeking a Security Senior Analyst to manage services for Managed Security Service customers. The role covers threat assessment, remediation direction, and Tier 3 analysis on complex incidents.

You will mentor teams, develop playbooks, and collaborate with clients, architects, and partners to maintain up-to-date security architectures. Responsibilities include incident management, alert triage, and sophisticated investigations across SIEM/EDR/XDR environments.