Full-Time Senior SOC Analyst / Lead SOC Analyst (Hans-on Exabeam) || Onsite to Westlake, TX

Hi,
Hope all is well,

Please respond me with Updated resume if you would like to apply for this Full-time Position,

Full-Time Senior SOC Analyst / Lead SOC Analyst (Hans-on Exabeam) || Onsite to Westlake, TX

Location : Westlake, TX

Position Type : Fulltime

Salary : DOE (your Expectation)

Job Description:

Senior SOC Analyst / Lead SOC Analyst (Exabeam) | Full-Time | Onsite (Westlake, TX)

Position Summary

We are seeking a Senior SOC Analyst / Lead SOC Analyst with strong hands-on expertise in Exabeam SIEM and UEBA to serve as the primary onshore Security Operations resource supporting a strategic customer environment. This individual will lead advanced incident investigations, threat hunting, detection engineering, and incident response activities while acting as the day-to-day SOC representative for the customer.

The ideal candidate will be comfortable operating in a customer-facing role, engaging directly with the customer's CISO organization , leading critical security incidents, and driving improvements across detection and response capabilities.

Key Responsibilities

• Monitor, investigate, and respond to security alerts and incidents using Exabeam SIEM and UEBA.
• Lead advanced incident investigations, including root cause analysis, containment, eradication, recovery, and post-incident reviews.
• Serve as the primary SOC point of contact for the customer and represent SOC operations in day-to-day engagements.
• Act as the Incident Responder and Commander during high-priority security incidents, coordinating response activities across multiple teams.
• Develop, tune, and optimize Exabeam correlation rules, behavioral analytics use cases, dashboards, and detection content.
• Conduct proactive threat hunting activities leveraging security telemetry, UEBA insights, and threat intelligence.
• Leverage Anomali threat intelligence to enrich investigations and improve detection effectiveness.
• Map detections and investigations to the MITRE ATT&CK framework.
• Collaborate with onshore and offshore SOC teams, as well as infrastructure, network, cloud, and application teams.
• Produce executive and technical incident reports, threat trend analysis, and operational metrics.

Required Skills & Experience

• Minimum 4 years of core SOC experience.
• Mandatory hands-on experience with Exabeam SIEM and UEBA.
• Strong experience in:
  • Security Monitoring & Incident Response
  • Threat Hunting
  • Detection Engineering
  • Security Event Correlation & Log Analysis
  • Threat Intelligence Operations
  • MITRE ATT&CK Framework
  • IOC/IOA Analysis
  • Root Cause Analysis
• Experience with:
  • Must have: Exabeam
  • Good to have: Anomali

Stakeholder & Leadership Expectations

• Act as the face of the SOC for the customer during U.S. business hours.
• Build strong working relationships with customer security leadership and operational teams.
• Provide regular operational updates and incident briefings directly to the customer's CISO organization .
• Lead incident communications and drive coordination during major cyber security events.

Work Environment

• Full-Time
• Onsite in Westlake, TX
• Support U.S. business hours from the Westlake office.
• Follow-the-sun operating model with after-hours coverage provided by the offshore India SOC team.
• Participate in on-call rotations for critical incident support.
• Hybrid delivery model consisting of onshore and offshore SOC personnel.
• Travel to the customer site (approximately 30 minutes from the Westlake office) during high-priority incidents, monthly operational reviews and quarterly governance/cadence meetings.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Experience supporting large enterprise / public sector environments.
• Relevant certifications.

Ideal Candidate Profile

A seasoned SOC professional with deep Exabeam expertise who can independently lead complex investigations, function as an Incident Responder and Commander during major security events, effectively engage senior customer stakeholders, and continuously enhance SOC detection and response capabilities.

Thanks & Regards
View email address on us.fitly.work
View phone number on us.fitly.work, 110