Sr SOC Analyst

ASM Global LLC.; United States; Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Paid vacation

401(k) plan

Job summary

ASM Global LLC. is seeking a Senior SOC Analyst to lead detection and response operations, focusing on incident handling and automation. This hybrid role, based out of Dallas/Frisco, TX or Conshohocken, PA, requires proven experience in security operations and effective communication skills.

The position offers competitive compensation and a robust benefits package, aiming to enhance operational resilience and manage threats proactively.

Qualifications

• 3–5 years in Security Operations or Incident Handling is required.
• Experience with writing and tuning SIEM rules essential.
• Excellent communication skills for documentation and summaries.

Responsibilities

• Build SOC playbooks and escalation workflows.
• Lead incident response from containment to eradication.
• Conduct post-incident reviews and drive improvements.

Skills

Incident handling

SIEM proficiency

Scripting skills (Python/PowerShell/Bash)

Post-incident reviews

Tools

SIEM (SecOps, Sentinel, QRadar)

EDR (CrowdStrike, Defender, SentinelOne)

SOAR platforms

Job description

Sr SOC Analyst

Reports to VP, Cyber Security. FLSA Status: Salaried/Exempt.

The Role

The Senior SOC Analyst is responsible for detection, triage, and response operations across our enterprise. This role blends hands‑on incident handling with detection engineering, playbook development, and response automation efforts. It delivers on alerts and case management, drives resilient detection strategies, and leads hunt efforts that proactively surface threats before they become incidents.

Essential Duties and Responsibilities

• Build and operationalize SOC playbooks and escalation workflows.
• Lead alert triage, enrichment, and false‑positive suppression.
• Author detection requirements; write and tune SIEM rules.
• Develop hunt hypotheses; lead hunt programs using advanced telemetry and signals intelligence.
• Design detection strategies across the kill chain; drive enterprise detection strategy.
• Execute incidents end‑to‑end: containment/eradication, documentation, and communication.
• Conduct post‑incident reviews and drive remediation and control improvements.
• Encourage industry collaboration; embed resilient detection engineering practices.
• Advocate and implement automation‑first incident response.

Qualifications

• Proven experience in a SOC or equivalent detection & response function; 3–5 years in Security Operations, Detection & Response, or Incident Handling (SOC experience required).
• Hands‑on experience with SIEM (e.g., SecOps, Sentinel, QRadar), EDR (e.g., CrowdStrike, Defender, SentinelOne), and SOAR platforms.
• Proficient in authoring detections, rule tuning, enrichment pipelines, and alert routing.
• Demonstrated ability in building and executing IR playbooks and containment/eradication plans.
• Experience conducting post‑incident reviews and RCAs, and delivering corrective action plans to engineering teams.
• Scripting skills (Python/PowerShell/Bash) for automation, enrichment, and data wrangling.
• Excellent written communication for case documentation and executive‑ready incident summaries.

Desired Skills and Abilities

• Turn noisy telemetry into actionable signals.
• Detail‑oriented and disciplined in organizing information.
• Build repeatable playbooks, maintain clean runbooks, and close feedback loops.
• Mentor other analysts and set standards for communication and delivery for the SOC.
• Comfortable presenting complex technical information to the CISO or other executive leadership.

Compensation

Competitive salary, commensurate with experience, and a generous benefits package that includes medical, dental, vision, life and disability insurance, paid vacation, and 401(k) plan.

Working Conditions

Location: Hybrid – based out of Dallas/Frisco, TX or Conshohocken, PA Corporate Headquarters.

Physical Demands

The position requires sitting at a computer for most of the day, occasional meetings, and occasional travel to conferences. Reasonable accommodations may be made for employees with disabilities.

Equal Opportunity

Legends Global is an Equal Opportunity/Affirmative Action employer and encourages Women, Minorities, Individuals with Disabilities, and protected Veterans to apply. VEVRAA Federal Contractor.