Sr. SOC Analyst

Akaasa Technologies; Dallas (TX); Hybrid; USD 110,000 - 165,000; Full time

Job summary

Akaasa Technologies in Dallas, TX is seeking a Sr. SOC Analyst for a hybrid role (3 days in office, 2 remote).

You will lead incident response, triage and remediation, collaborate with MDR partners, and tune detections using KQL across Sentinel/ Defender XDR. Cloud telemetry from Azure and AWS will be analyzed, with playbooks and SOAR workflows built and refined. Strong communication under pressure is essential.

Qualifications

• 5–7 years in cybersecurity operations, incl. 3+ years in Tier 2/3 SOC or escalation.
• CompTIA Security+ or equivalent required.
• Led incident response triage, investigation and remediation with MDR partners.
• Experience with SIEM/SOAR + EDR (Sentinel, Defender XDR, Cortex XDR).
• Ability to author and tune detection content (KQL) and productionize it.
• Experience analyzing Azure/AWS cloud telemetry (Entra logs, CloudTrail).
• Hands-on with automated playbooks and SOAR workflows.
• Strong network security, OS and malware analysis knowledge.
• Familiar with MITRE ATT&CK and threat intelligence platforms.
• Excellent analytical, problem-solving and communication skills.

Skills

Incident response

SOC operations

MDR partnerships

KQL

Microsoft Sentinel

Microsoft Defender XDR

Cortex XDR

ServiceNow

Cloud security

SOAR playbooks

MITRE ATT&CK

Threat intelligence

Network security

Malware analysis

Communication skills

Tools

Microsoft Sentinel

Microsoft Defender XDR

Cortex XDR

ServiceNow

SOAR platforms

KQL

Job description

POSITION

Sr. SOC Analyst

Start date & Location

Hybrid with 3 days a week in office and 2 days remote

Dallas, TX or Miami, FL

REQUIRED SKILLS

Requirements

• Minimum 5-7 years of experience in a cybersecurity operations role, with at least 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier 2/Tier 3 SOC or escalation capacity.
• CompTIA Security+ or equivalent.
• Proven experience leading incident response triage, investigation, and remediation, including working directly with MDR partners.
• In-depth knowledge of security tools and technologies, including SIEM/SOAR platforms (e.g., Microsoft Sentinel), endpoint detection and response solutions (e.g., Microsoft Defender XDR, Palo Alto Cortex XDR), and ticketing systems (e.g., ServiceNow).
• Demonstrated ability to author and tune detection content (e.g., KQL in Sentinel/Defender) and operationalize it into production.
• Experience analyzing cloud security telemetry (e.g., Azure/Entra sign-in logs, AWS CloudTrail).
• Hands‑on experience building or maintaining automated playbooks and response workflows in a SOAR platform.
• Strong understanding of network security concepts, operating systems, and malware analysis techniques.
• Familiarity with the MITRE ATT&CK framework and threat intelligence platforms.
• Excellent analytical, problem‑solving, and communication skills, with the ability to work under pressure and manage multiple priorities.

Preferred

• Certifications such as CISSP, GCIA, GCIH, GCFA, CySA+, eJPT/PJPT, CEH, SC-200.
• Scripting and automation skills (Python, PowerShell) for tooling, enrichment, and analysis.
• Experience supporting an EDR platform migration (e.g., Cortex XDR to Microsoft Defender XDR).
• Experience with or strong interest in AI-assisted triage and agentic SOC tooling to augment analyst workflows.
• Broader cloud security experience across AWS, Azure, and OCI.
• Experience with Microsoft Sentinel, Proofpoint, and Palo Alto Cortex XDR.