SOC Shift Lead - Information Security

Elevance Health; Atlanta (GA); On-site; USD 102,880 - 185,184; Full time

Job summary

Elevance Health is seeking a Security Analyst Sr (SOC Shift Lead) within Cyber Security Threat Management to oversee security operations, incident response, and escalation for complex events. The role follows a schedule 8-4 EST with a hybrid work model; Indianapolis, IN is preferred but other eligible locations within commuting distance may be considered.

You will mentor junior analysts, help develop SOC playbooks, coordinate shift coverage, and lead changes, capacity planning, and problem

Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• Minimum 3 years in a security operations, design or engineering role in relevant areas.
• Experience across multiple information security domains and incident response.

Responsibilities

• Serve as escalation point for junior analysts during security event investigations.
• Mentor and guide junior analysts to improve investigation quality and consistency.
• Coordinate shift activities and on-call planning to ensure coverage.
• Develop and maintain SOC procedures, playbooks and operational documentation.
• Lead complex deployments and testing plans for security technologies.
• Coordinate reporting of security events and provide architecture support.
• Lead incident recoveries and root-cause analysis with minimal supervision.

Skills

Incident response

SOC leadership

Security operations

Education

Bachelor's degree

BA/BS in Information Systems or Computer Science

Tools

SIEM platforms

EDR tools

Forensics tools

Cloud forensics

Job description

Security Analyst Sr (SOC Shift Lead - Information Security)

Cyber Security Threat Management

Schedule: 8-4 EST

Location: Preference for Indianapolis, IN but alternate locations may be considered if candidates reside within a commuting distance from an office

Hybrid 1: This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office.

• Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

The Security Analyst Sr. is responsible for managing the delivery of information and network security systems and/or technology services, which may include server, desktop, software, network, database, helpdesk components.

How you will make an impact

• Serves as an escalation point for junior analysts during security event investigations and incident response activities.
• Mentor and provide guidance to junior analysts to improve investigation quality and operational consistency.
• Coordinate analyst shift activities and assist with maintaining operational coverage schedules, including on-call coordination and PTO planning.
• Assist with development and maintenance of SOC procedures, playbooks, and operational documentation.
• Provides trouble resolution on complex problems and leads implementations for system and network security technologies; develops testing plans to ensure quality of implementation.
• Coordinates and prepares the reporting of data security events and incidents; provides system and network architecture support for information and network security technologies.
• Provides technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards and technologies.
• Represents major upgrades and reconfigurations in change control.
• Design & analyze mix of vendor services meeting business and information security requirements; maintains relationship with key vendors.
• Leads lights on initiatives to consolidate equipment and/or implement business relocations.
• Determine and perform complex configuration changes to meet business and information security requirements.
• Perform capacity analysis; recommend and implement capacity increases.
• Serve as the technical escalation for results of preventative maintenance routines; supervise preventative maintenance; represents infrastructure security support in significant projects and performs the most complex operations and administration tasks.
• Respond to level 3 & 4 change and problem requests without supervision.
• Lead level 1 & 2 incident recoveries and root cause analysis.

Minimum Requirements

• Requires a bachelor’s degree or equivalent combination of education and experience that would provide the knowledge to perform such work.
• Experience must include a minimum of 3 years experience in a support & operations or design & engineering role in any of the following areas: access management or network security technologies, servers, networks, Network communications, telecommunications, operating systems, middleware, disaster recovery, collaboration technologies, hardware/software support or other infrastructure services role; or any combination of education and experience, which would provide an equivalent background.
• Requires experience providing top-tier support for 3 or more of the information security technology areas: 1) Access Control, 2) Application Security, 3) Business Continuity and Disaster Recovery Planning, 4) Cryptography, 5) Information Security and Risk Management 6) Legal, Regulations, 7) Compliance and Investigations, 8) Operations Security, 9) Physical (Environmental) Security, 10) Security Architecture and Design, 11) Telecommunications and Network Security.

Preferred Skills, Capabilities, and Experiences

• Technical security certifications (e.g. Systems Security Certified Practitioner) strongly preferred. Such as: GCIH, GCIA, CompTIA CySA+, BTL2.
• Experience responding to incidents associated with financially-motivated and APT threat actors.
• Strong foundational knowledge of Windows and Cloud Forensics.
• BA/BS degree in Information System and Computer Science or related field of study strongly preferred.
• Experience working in a Security Operations Center (SOC) environment with incident monitoring, triage, and escalation responsibilities preferred.
• Experience serving as a technical lead, shift lead, or escalation resource for security operations teams preferred.
• Familiarity with SIEM platforms, endpoint detection and response (EDR) tools, and security event analysis preferred.
• Experience developing or maintaining SOC playbooks, runbooks, and standard operating procedures preferred.

For candidates working in person or virtually in the below location(s), the salary* range for this specific position is $102,880 to $185,184.

Locations: Illinois; Nevada; New York; Virginia; Washington State.

In addition to your salary, Elevance Health offers benefits such as a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements).

Elevance Health is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process may contact [e-mail] for assistance.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including, but not limited to, the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act.