Senior Threat Detection & Incident Response Lead

CLEAR - Corporate; New York (NY); On-site; USD 145,000 - 170,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) with employer match

Wellness and learning stipends

Job summary

CLEAR is seeking a Senior Security Operations Analyst III to join our SOC team to strengthen our ability to detect, investigate, and respond to evolving security threats. You’ll lead complex investigations, improve detection logic, and mentor analysts while helping develop playbooks and standards for threat analysis.

You’ll work across networks, endpoints, data centers, and cloud environments, applying MITRE ATT&CK and other frameworks to guide improvements and defender decisions.

Qualifications

• 8+ years of cybersecurity experience, including 5+ years in security operations.
• Deep knowledge of SIEM, EDR, and security monitoring technologies.
• Applying threat intelligence and frameworks (MITRE ATT&CK, NIST CSF, ISO 27001).
• Experience with data, automation, scripting, and AI-enabled tools.
• Strong analytical judgment, independent problem solving, and mentoring ability.
• Certifications such as GCIH, GCIA, OSCP are a plus.
• Experience collaborating across teams to deliver on strategic goals.

Responsibilities

• Lead complex investigations of security events across networks, endpoints, data centers, cloud environments and more.
• Develop, tune, and optimize threat detection logic across SIEM/EDR and other platforms.
• Partner with Engineering and Infrastructure to drive remediation and improvements.
• Apply threat intelligence and AI-enabled tools to identify patterns and accelerate investigations.
• Mentor junior analysts and help establish scalable processes and playbooks.
• Evaluate detection coverage against MITRE ATT&CK and other frameworks to improve visibility.
• Lead improvements to workflows, SOPs, and tooling for incident response.
• Clearly communicate findings and recommended actions to technical and non-technical stakeholders.
• Participate in on-call rotation and respond to critical security events.

Skills

SIEM

EDR

Threat intelligence

MITRE ATT&CK

NIST CSF

ISO 27001

Automation

Scripting

AI-enabled tools

Education

GCIH

GCIA

OSCP

Tools

SIEM

EDR

Job description

CLEAR is seeking a Senior Security Operations Analyst III to join our SOC team to strengthen our ability to detect, investigate, and respond to evolving security threats. You’ll lead complex investigations, improve detection logic, and mentor analysts while helping develop playbooks and standards for threat analysis.

You’ll work across networks, endpoints, data centers, and cloud environments, applying MITRE ATT&CK and other frameworks to guide improvements and defender decisions.