SOC Operations Lead: Detection & Incident Response

Pearson; Phoenix (AZ); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Pearson's Security Operations Center seeks a Senior Security Analyst to lead day-to-day security operations, drive improvements, and advance detection engineering across Pearson’s environments. This role is pivotal in safeguarding assets through rapid incident response, automation, and collaboration with internal and external partners.

You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson’s security standards and regulatory requirements.

Qualifications

• 4+ years in security operations, incident response, and detection engineering.
• Experience with SOAR, EDR, NDR, and SIEM technologies.
• Proven ability to communicate risk to non-technical stakeholders.

Responsibilities

• Lead advanced SOC operations, incident detection, triage, containment, and root cause analysis.
• Develop and optimize detection logic, playbooks, and automated responses.
• Improve SOC processes to keep pace with evolving threats.
• Collaborate with threat intel to translate TTPs into SOC actions.
• Engage stakeholders with actionable security insights and reports.
• Ensure compliance with standards and governance; deliver metrics.

Skills

Security operations

Incident response

Detection engineering

Cloud security

Stakeholder management

Communication

Tools

SOAR

EDR

NDR

SIEM

Cloud providers (AWS/Azure/GCP)

Job description

Pearson's Security Operations Center seeks a Senior Security Analyst to lead day-to-day security operations, drive improvements, and advance detection engineering across Pearson’s environments. This role is pivotal in safeguarding assets through rapid incident response, automation, and collaboration with internal and external partners.

You will refine SOC processes, develop detection capabilities, and ensure alignment with Pearson’s security standards and regulatory requirements.