SOC Lead: Incident Response, Detection & Automation

Pearson; Topeka (KS); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Pearson is seeking a Senior Security Analyst to lead day-to-day security operations, drive process improvement, and advance detection engineering across Pearson’s environments. This role focuses on rapid incident response, automation, and collaboration with internal and external partners to safeguard critical assets.

You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson’s security standards and regulatory requirements, including on-call rotations for

Qualifications

• 4+ years of security operations, incident response, and detection engineering in regulated or government environments.
• Hands-on with SOAR, EDR, NDR, and SIEM technologies.
• Experience with one or more Cloud Providers (AWS, Azure, GCP).

Responsibilities

• Lead and execute advanced SOC operations including incident detection, triage, containment and root-cause analysis.
• Develop, implement and optimize detection logic, playbooks and automated response workflows.
• Continuously assess and enhance SOC processes and procedures in alignment with best practices.
• Collaborate with threat intelligence teams to analyze risks and integrate TTPs into SOC operations.
• Act as trusted advisor to internal stakeholders, translating findings into actionable insights.
• Ensure SOC activities comply with standards (e.g., NCSC, Cyber Essentials Plus) and Pearson policies.
• Deliver executive-level reporting, risk assessments and metrics to demonstrate SOC effectiveness.

Skills

SOAR

EDR

NDR

SIEM

AWS

Azure

GCP

Stakeholder management

Job description

Pearson is seeking a Senior Security Analyst to lead day-to-day security operations, drive process improvement, and advance detection engineering across Pearson’s environments. This role focuses on rapid incident response, automation, and collaboration with internal and external partners to safeguard critical assets.

You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson’s security standards and regulatory requirements, including on-call rotations for