Sr. SOC Analyst Incident Response Lead 5457

Tier4 Group; Wixom (MI); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Tier4 Group is seeking a Senior SOC Analyst / Incident Response Lead to serve as the technical lead for cybersecurity investigations, threat hunting, and incident response activities. This is a hands-on role, not a management position.

The ideal candidate will have direct experience conducting security investigations, responding to incidents, analyzing malware/ransomware, and performing root cause analysis.

Qualifications

• 5+ years of hands-on cybersecurity operations or SOC experience.
• Experience using SIEM and EDR platforms to monitor, investigate, and respond to security events.
• Strong understanding of networking concepts, including TCP/IP, DNS, and network traffic analysis.
• Proven experience leading complex security investigations from detection through containment, remediation, and resolution.
• Experience with security automation, vulnerability management, and security operations best practices.

Responsibilities

• Lead Tier 2/3 security investigations and incident response efforts.
• Conduct proactive threat hunting activities.
• Investigate malware, ransomware, phishing, and advanced threats.
• Analyze security alerts, logs, and suspicious activity.
• Perform root cause analysis and document findings.
• Utilize SIEM, EDR, IDS/IPS, and other security tools.
• Partner with security vendors and support remediation efforts.
• Mentor junior analysts and contribute to security operations improvements.

Skills

Threat hunting

Incident response

Root cause analysis

Security investigations

Networking concepts

Log analysis

Tools

SIEM

EDR

IDS/IPS

Job description

Senior SOC Analyst / Incident Response Lead

3 days a week Hybrid Onsite: Wixom, MI

Permanent Direct Hire

Overview:

We are seeking a Senior SOC Analyst / Incident Response Lead to serve as the technical lead for cybersecurity investigations, threat hunting, and incident response activities. This is a hands-on role, not a management position. The ideal candidate will have direct experience conducting security investigations, responding to incidents, analyzing malware/ransomware, and performing root cause analysis.

Responsibilities

• Lead Tier 2/3 security investigations and incident response efforts
• Conduct proactive threat hunting activities
• Investigate malware, ransomware, phishing, and advanced threats
• Analyze security alerts, logs, and suspicious activity
• Perform root cause analysis and document findings
• Utilize SIEM, EDR, IDS/IPS, and other security tools
• Partner with security vendors and support remediation efforts
• Mentor junior analysts and contribute to security operations improvements

Requirements

• 5+ years of hands-on cybersecurity operations or SOC experience with a strong background in incident response, threat hunting, and investigating malware, ransomware, and advanced cyber threats.
• Experience using SIEM and EDR platforms to monitor, investigate, and respond to security events.
• Strong understanding of networking concepts, including TCP/IP, DNS, and network traffic analysis.
• Proven experience leading complex security investigations from detection through containment, remediation, and resolution.
• Experience monitoring and triaging security alerts, analyzing logs, and performing root cause analysis.
• Experience with security automation, vulnerability management, and security operations best practices.

Preferred Certifications

CISSP, GCIH, GCIA, GCFA, CASP+, Security+, Network+, or similar.

Target candidates: Senior SOC Analysts, SOC Analyst III, Incident Response Analysts, Threat Hunters, DFIR Analysts, and Detection & Response Analysts.

If you're passionate about incident response and cybersecurity investigations and want to remain hands-on in a senior technical role, we'd love to hear from you.