Senior Threat Detection & Incident Response Lead

RiverPark Ventures; New York (NY); On-site; USD 145,000 - 170,000; Full time

Benefits offered by this job

Healthcare plans

401(k) with employer match

Wellness stipend

OneMedical membership

Fertility & adoption support

Flexible time off

Catered lunches

Fully stocked kitchens

Learning & development stipend

Job summary

CLEAR is seeking a Senior Security Operations Analyst III to lead investigations, enhance threat detection, and mentor SOC analysts within the team. You will tune SIEM/EDR, apply MITRE ATT&CK and NIST CSF, and collaborate with Engineering to strengthen CLEAR's security posture.

As a senior member, you will help establish scalable playbooks and procedures, drive proactive threat hunting, and participate in on-call incident response.

Qualifications

• 8+ years in cybersecurity, incl. 5+ years in security operations, threat detection or incident response
• Deep knowledge of SIEM, EDR and security monitoring technologies
• Applying threat intelligence and frameworks such as MITRE ATTACK, NIST CSF or ISO 27001
• Using data, automation, scripting, and AI-enabled security tools to improve workflows
• Solving complex security problems independently and mentoring others
• Certifications such as GCIH, GCIA, OSCP are a plus
• Experience collaborating across teams to deliver strategic program goals

Responsibilities

• Lead complex investigations of security events across networks, endpoints, data centers, cloud environments and critical systems
• Develop, tune, and optimize threat detection logic across SIEM, EDR and other platforms
• Partner with Engineering and Infrastructure to investigate threats, identify root causes, and drive remediation
• Apply threat intelligence and AI-enabled tools to identify patterns and improve detection workflows
• Serve as escalation point and mentor junior analysts, establishing scalable processes and playbooks
• Evaluate detection coverage against MITRE ATT&CK and NIST CSF to strengthen security controls
• Lead improvements to SOC workflows, SOPs, and tooling, ensuring quality and efficiency
• Communicate findings and risk clearly to technical and non-technical stakeholders
• Participate in on-call rotation and respond to critical events as needed

Skills

Security operations

Threat detection

Incident response

SIEM/EDR

Threat intelligence

MITRE ATT&CK

Automation/Scripting

Mentoring

Tools

SIEM

EDR

Job description

CLEAR is seeking a Senior Security Operations Analyst III to lead investigations, enhance threat detection, and mentor SOC analysts within the team. You will tune SIEM/EDR, apply MITRE ATT&CK and NIST CSF, and collaborate with Engineering to strengthen CLEAR's security posture.

As a senior member, you will help establish scalable playbooks and procedures, drive proactive threat hunting, and participate in on-call incident response.