Senior Threat Detection & Response Analyst III

CLEAR; New York (NY); Sur place; USD 145 000 - 170 000; Plein temps

Avantages offerts par ce poste

Healthcare plans

401(k) with employer match

Wellness stipend

Free OneMedical memberships for you &/

Career development programs

Résumé du poste

CLEAR is seeking a Senior Threat Detection & Response Analyst III to join our SOC team. You will lead complex investigations across networks, endpoints, cloud environments, and data centers, driving incidents from initial analysis through remediation.

You will develop and tune threat detection logic across SIEM/EDR, apply threat intel, and mentor junior analysts while improving detection coverage and security posture.

Qualifications

• 8+ years in cybersecurity, including 5+ years in security operations, threat detection, incident response.
• Deep knowledge of SIEM/EDR and security monitoring technologies, with experience investigating complex events and developing detection logic.
• Applying threat intel and frameworks such as MITRE ATT&CK, NIST CSF, or ISO 27001 to identify adversary behavior and strengthen controls.
• Using data, automation, scripting, and AI-enabled tools to improve threat detection and investigation workflows.
• Solving complex security problems independently, communicating findings clearly, and mentoring other analysts.
• Certifications such as GCIH, GCIA, OSCP are a plus.
• Experience working across teams to deliver on program-level goals.

Responsabilités

• Lead complex investigations of security events across networks, endpoints, data centers, cloud environments, and other critical systems, driving incidents from initial analysis through escalation and remediation.
• Develop, tune, and optimize threat detection logic across SIEM, EDR, and other security platforms, identifying coverage gaps and reducing false positives.
• Partner with Engineering, Infrastructure, and other teams to investigate threats, identify root causes, communicate risk, and drive remediation.
• Apply threat intelligence, data, automation, and AI-enabled tools to identify patterns, accelerate investigations, and strengthen decision-making.
• Serve as a subject matter expert and escalation point, mentoring junior team members and helping establish playbooks and standards.
• Continuously evaluate detection coverage against MITRE ATT&CK and other frameworks to improve visibility.
• Lead improvements to SOC workflows, SOPs, and tooling to increase quality and efficiency of analysis.
• Clearly communicate findings, risk, and recommended actions to technical and non-technical stakeholders.
• Participate in on-call rotation and respond to critical security events outside standard hours.

Connaissances

SIEM/EDR expertise

Threat intel frameworks

Automation & scripting

AI-enabled security tools

Threat hunting

Mentoring others

Outils

SIEM platforms

EDR platforms

Automation tools

Description du poste

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences.

CLEAR is seeking a Senior Threat Detection & Response Analyst III to join our SOC team to help strengthen our ability to detect, investigate, and respond to evolving security threats. In this role, you’ll lead complex investigations, improve CLEAR’s threat detection and response capabilities, and serve as a trusted security partner while helping develop the analysts and program around you.

What you'll do:

• Lead complex investigations of security events across corporate networks, endpoints, data centers, cloud environments, and other critical systems, driving incidents from initial analysis through escalation and remediation
• Develop, tune, and optimize threat detection logic across SIEM, EDR, and other security platforms, proactively identifying coverage gaps, reducing false positives, and improving the fidelity of security alerts
• Partner with Engineering, Infrastructure, and other teams to investigate threats, identify root causes, communicate risk, and drive timely remediation and improvements to CLEAR’s security posture
• Apply threat intelligence, data, automation, and AI-enabled tools to identify emerging attack patterns, accelerate investigations, improve detection workflows, and strengthen decision-making while applying sound security judgment
• Serve as a subject matter expert and escalation point for other analysts, mentoring junior team members, sharing knowledge, and helping establish scalable processes, playbooks, and standards for threat detection and analysis
• Continuously evaluate CLEAR’s detection coverage against the evolving threat landscape and frameworks such as MITRE ATT&CK, identifying opportunities to improve visibility and proactively defend against emerging threats
• Lead improvements to Security Operations workflows, standard operating procedures, documentation, and tooling to increase the quality, consistency, and efficiency of threat analysis and incident response
• Clearly communicate technical findings, risk, and recommended actions to technical and non-technical stakeholders, tailoring the level of detail to the audience
• Participate in the Security Operations on-call rotation and respond to critical security events and incidents outside of standard working hours, as needed

How you'll measure success:

• High-quality, accurate investigations that lead to timely containment, remediation, and actionable security improvements
• Measurable improvements in Security Operations workflows, detection logic, automation, and analyst efficiency
• Increased team capability through effective mentorship, knowledge sharing, documentation, and scalable operating practices
• Improved detection coverage, alert fidelity, and time to identify and respond to security threats

What you're great at:

• 8+ years of cybersecurity experience, including 5+ years in security operations, threat detection, incident response, or a related discipline
• Deep knowledge of SIEM, EDR, and security monitoring technologies, with demonstrated experience investigating complex events and developing, tuning, and optimizing detection logic
• Applying threat intelligence and frameworks such as MITRE ATT&CK, NIST CSF, or ISO 27001 to identify adversary behavior, evaluate detection coverage, and strengthen security controls
• Using data, automation, scripting, and AI-enabled security tools to improve threat detection and investigation workflows while applying strong analytical judgment to validate findings and make informed decisions
• Solving complex security problems independently, communicating findings clearly, building trusted cross-functional relationships, and mentoring other analysts
• Certifications such as GCIH, GCIA, OSCP are a plus
• Experience working across teams and functions to deliver on strategic, program-level goals

How You'll be Rewarded:

At CLEAR, we help YOU move forward - because when you’re at your best, we’re at our best. You’ll work with talented team members motivated by our mission of making experiences safer and easier. Our offices are bright and energetic with an open concept and plenty of conference rooms and casual co-working spaces. We also offer catered lunches every day and have fully stocked kitchens. Outside of the office, we invest in your well-being and learning & development with stipends and reimbursement programs.

We offer holistic total rewards, including comprehensive healthcare plans, family-building benefits (fertility and adoption/surrogacy support), flexible time off, annual wellness stipend, free OneMedical memberships for you and your dependents, a CLEAR Plus membership, and a 401(k) retirement plan with employer match. The base salary range for this role is $145,000 - $170,000, depending on levels of skills and experience.

The base salary range represents the low and high end of CLEAR’s salary range for this position. Salaries will vary depending on various factors which include, but are not limited to location, education, skills, experience and performance. The range listed is just one component of CLEAR’s total compensation package for employees and other rewards may include annual bonuses, commission, Restricted Stock Units.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or other characteristics protected by law.

CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs. Please let us know if you require a reasonable accommodation to apply for a job or perform your job. Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.

We are committed to a transparent and secure hiring process. All communications related to this role will come directly from a CLEAR employee through valid CLEAR channels (e.g., a valid @clearme.com email address or verified CLEAR LinkedIn profile). We encourage candidates to remain alert to job scams and to report any suspicious activity.