SOC Analyst

Diligente Technologies; San Jose (CA); Hybrid; USD 96,000 - 152,000; Part time

Job summary

Diligente Technologies is seeking a hands-on Senior SOC L3 Analyst / Incident Response Lead to head advanced investigations, incident response activities, threat hunting, and detection improvement across our global environment in a hybrid San Jose setting.

You will mentor SOC analysts, lead complex investigations, and drive improvements in detection and response methodologies with a strong focus on MITRE ATT&CK alignment.

Qualifications

• 10+ years of SOC, Incident Response, Threat Hunting, or Security Operations experience.
• Strong hands-on experience with one or more SIEM platforms.
• Strong SIEM query writing, detection engineering, and investigation skills.
• Experience with EDR, firewall, DNS, identity, cloud, and endpoint security technologies.
• Deep understanding of MITRE ATT&CK and incident response methodologies.

Responsibilities

• Lead complex investigations across endpoint, identity, network, cloud, and application environments.
• Act as the technical escalation point for critical security incidents.
• Perform threat hunting, root cause analysis, and incident response activities.
• Develop and tune SIEM detection rules, correlation logic, dashboards, and queries.
• Identify detection gaps and reduce false positives.
• Mentor SOC analysts and improve investigation quality and operational processes.

Skills

SOC operations

Incident response

Threat hunting

SIEM tuning

Investigation

Tools

EDR

Firewall

DNS security

Identity protection

Cloud security

Endpoint security

Job description

Title: Senior SOC L3 Analyst / Incident Response Lead

Location: San Jose, CA(Hybrid)

Duration: Contract

Seeking a hands-on Senior SOC L3 Analyst / Incident Response Lead to lead advanced investigations, incident response activities, threat hunting, and detection improvement initiatives across our global environment.

Key Responsibilities

• Lead complex investigations across endpoint, identity, network, cloud, and application environments.
• Act as the technical escalation point for critical security incidents.
• Perform threat hunting, root cause analysis, and incident response activities.
• Develop and tune SIEM detection rules, correlation logic, dashboards, and queries.
• Identify detection gaps and reduce false positives.
• Mentor SOC analysts and improve investigation quality and operational processes.

Required Experience

• 10+ years of SOC, Incident Response, Threat Hunting, or Security Operations experience.
• Strong hands-on experience with one or more SIEM platforms.
• Strong SIEM query writing, detection engineering, and investigation skills.
• Experience with EDR, firewall, DNS, identity, cloud, and endpoint security technologies.
• Deep understanding of MITRE ATT&CK and incident response methodologies.