Senior SOC Threat Hunter & Incident Response Lead (Remote)

SQUAD Conseil et Expertises; United States; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

SquadeXpérience training plan

MixYourTalent webinars

CTF sessions

TheExpert technical blog

Job summary

SQUAD Group is seeking a Senior SOC Analyst to join a remote, international team defending critical assets. You will hunt threats, engineer detections, and lead incident response across SIEM, EDR, and SOAR while building automated playbooks and tuning alerts.

The role emphasizes hands-on investigations, collaboration with a Technical Lead, and mentoring junior analysts; experience with MITRE ATT&CK and threat intelligence is valued.

Qualifications

• 5–7 years of experience in SOC operations, detection engineering, or incident response.
• Strong knowledge of SIEM, EDR, and SOAR platforms.
• Scripting or automation experience (Python, PowerShell).
• Understanding of MITRE ATT&CK and threat intelligence.

Responsibilities

• Conduct advanced incident investigations, threat hunts, and forensic analysis.
• Develop and refine custom detection rules and alert tuning.
• Integrate data sources to improve signal fidelity.
• Design and maintain automated playbooks using SOAR.
• Collaborate with the Technical Lead on detection improvements.
• Mentor L1/L2 analysts with advanced techniques.

Skills

SOC operations

Threat hunting

Detection engineering

Incident response

SIEM proficiency

EDR proficiency

SOAR platforms

Scripting automation

MITRE ATT&CK knowledge

Education

GIAC GCIA/GCIH

CrowdStrike Certified Falcon Administrator

Elastic Security Analyst

BTL2

Tools

SIEM platforms

EDR platforms

SOAR platforms

Job description

SQUAD Group is seeking a Senior SOC Analyst to join a remote, international team defending critical assets. You will hunt threats, engineer detections, and lead incident response across SIEM, EDR, and SOAR while building automated playbooks and tuning alerts.

The role emphasizes hands-on investigations, collaboration with a Technical Lead, and mentoring junior analysts; experience with MITRE ATT&CK and threat intelligence is valued.