Vice President, Senior SOC Analyst

Responsibilities Lead triage and investigation of security alerts, escalating and coordinating incident response as needed Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework Mentor junior analysts and provide guidance on investigation techniques Coordinate with Threat Intelligence to enrich investigations Partner with Engineering teams to improve log fidelity Create clear, actionable incident reports and executive summaries Support purple team exercises and post-incident reviews Requirements 8+ years of experience in a SOC, incident response, or threat detection role, including Tier 2/3 investigations Advanced proficiency with SIEM (e.g., Splunk, QRadar, Sentinel), EDR (e.g., CrowdStrike, Microsoft Defender), and SOAR platforms Strong knowledge of network security, Windows/Linux Familiarity with identity systems and common cloud logging sources Hands‑on experience with the MITRE ATT&CK framework, threat hunting, IOC/IOA development, and detection tuning Demonstrated ability to lead complex incidents and communicate clearly under time pressure Scripting or automation experience (e.g., Python, PowerShell) for investigation enrichment Excellent documentation skills and an evidence-driven approach to investigations. #J-18808-Ljbffr Jobtailor