Senior Threat Detection & Incident Response (Hybrid)

Franchise World Headquarters, LLC; Shelton (CT); Ibrido; USD 103.000 - 128.000; Tempo pieno

Vantaggi offerti da questo lavoro

Insurance Plans (medical, dental)

Pension/401K/RSP

Competitive Bonus

Mobility Allowance

Tuition Reimbursement

Company Holidays

Volunteering time

Descrizione del lavoro

Subway is seeking a Sr. Threat Detection Analyst to join the SOC in Shelton, CT. This senior, escalation-level role combines hands-on investigation with threat intelligence to validate alerts and guide incident handling.

You will mentor junior analysts, tune detections, and drive playbook improvements in a hybrid work setting. The ideal candidate has 5+ years in SOC/threat detection, strong EDR/SIEM experience, and deep knowledge of Microsoft 365 security and cloud postures.

Competenze

• 5+ years of experience in a SOC analyst or threat detection role, including senior or escalation-level investigation work.
• Hands-on experience with endpoint detection and response (EDR) tools, and practical experience with SIEM or log analysis platforms.
• Working knowledge of identity security and SSO platforms including Microsoft Entra ID and Okta, and understanding of network security fundamentals, firewalls, and web application and API protection.
• Experience securing a Microsoft 365 environment, Defender, Exchange Online, and Purview, and familiarity with Wiz for cloud security posture management.
• Familiarity with MITRE ATT&CK framework and attacker tactics, OSINT enrichment to support investigations.
• Ability to read and reason about detection logic to identify tuning opportunities.
• Strong written communication for incident docs and analyst handoffs.

Mansioni

• Serve as a senior escalation point for alerts triaged by junior analysts and determine scope and business impact.
• Build attack timelines and identify indicators of compromise using CrowdStrike and threat intel.
• Investigate and respond to threats across the Microsoft 365 environment and Wiz cloud findings.
• Execute and refine incident response playbooks across multiple threat categories.
• Escalate high-severity or complex incidents with thorough handoff documentation.
• Mentor junior analysts and contribute to detection tuning and playbook improvements.
• Communicate findings clearly with employees and stakeholders during investigations.
• Document investigation steps and remediation actions for audit and compliance readiness.

Conoscenze

SOC escalation

EDR

SIEM

Identity security

Threat intel

MITRE ATT&CK

OSINT

Strumenti

CrowdStrike Falcon Next-Gen SIEM

Microsoft Defender

Purview

Wiz

Microsoft Entra ID

Okta

Palo Alto PAN-OS

Akamai App and API Protector

Descrizione del lavoro

Subway is seeking a Sr. Threat Detection Analyst to join the SOC in Shelton, CT. This senior, escalation-level role combines hands-on investigation with threat intelligence to validate alerts and guide incident handling.

You will mentor junior analysts, tune detections, and drive playbook improvements in a hybrid work setting. The ideal candidate has 5+ years in SOC/threat detection, strong EDR/SIEM experience, and deep knowledge of Microsoft 365 security and cloud postures.