Senior SOC Analyst | MDR

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior SOC Analyst | MDR based in United States.** This role is part of a 24/7 Cyber Defense team responsible for protecting critical infrastructure, applications, and data across multiple environments. You will investigate sophisticated security alerts, identify genuine threats, and determine their root causes, scope, and potential impact. The position combines advanced SIEM, EDR, SOAR, threat intelligence, network, endpoint, and cloud security capabilities. You will contribute directly to detection engineering, threat visibility, incident response, and defensive improvements. The role offers exposure to modern cybersecurity technologies and evolving adversary techniques. It is an analytical and hands-on opportunity for a security professional who thrives in high-pressure environments and wants to strengthen enterprise cyber resilience. ### Accountabilities: - Work as part of a **24/7 Cyber Defense team** operating on rotational shifts to continuously monitor and respond to security threats across multiple environments. - Investigate and triage advanced security alerts, determining their legitimacy, root cause, scope, business impact, and relevance while identifying evolving attack vectors. - Correlate telemetry and alerts from SIEM platforms, EDR solutions, intrusion prevention systems, firewalls, threat intelligence sources, and other security technologies to distinguish genuine threats from false positives. - Analyze and respond to detections affecting cloud infrastructure, services, and applications, applying appropriate investigation and response techniques across modern cloud environments. - Provide clear recommendations for containment, mitigation, remediation, and recovery to client or internal incident response teams based on investigation findings. - Contribute to the development, refinement, and tuning of detection rules, analytics, and security use cases to improve threat visibility and strengthen the overall defensive posture. - Collaborate with Threat Intelligence, SOAR, and Engineering teams to enrich alerts, add contextual information, improve investigations, and enhance security operations. - Document investigations, findings, evidence, and recommendations according to SOC procedures, reporting standards, service-level requirements, and operational quality expectations. - Act as a subject matter expert in detection and response methodologies, including SIEM, SOAR, threat intelligence, log analysis, network telemetry, endpoint telemetry, and incident response techniques. - Develop and maintain accurate SOC documentation, including standard operating procedures, playbooks, runbooks, investigation procedures, and other operational guidance. - Mentor and guide junior analysts, promote continuous learning and operational excellence, and help maintain adherence to quality benchmarks and SLAs. ### Requirements - **4+ years of experience in incident response, SOC Tier 2 operations, or an equivalent security operations role** is required. - Strong understanding of adversary tradecraft and frameworks such as **MITRE ATT&CK and the Cyber Kill Chain**, with the ability to apply this knowledge during threat investigations. - Deep understanding of **cloud security concepts** and experience investigating threats affecting cloud infrastructure, services, and applications. - Hands-on experience with **EDR, SIEM, SOAR, and security log pipelines**, including the ability to correlate information across multiple telemetry sources. - Strong knowledge of **Windows, Linux, and cloud security**, together with an understanding of endpoint and infrastructure security principles. - In-depth knowledge of **network protocols, endpoint artifacts, memory analysis, and log analysis**, with the ability to use technical evidence to identify attack activity and root causes. - Familiarity with scripting languages for security analysis, investigation, automation, or data processing is expected. - Strong analytical and problem-solving skills, with the ability to investigate complex incidents, identify patterns, evaluate evidence, and make sound security decisions. - Ability to remain calm and effective under pressure during active security incidents while working with minimal supervision and managing competing priorities. - Excellent written and verbal communication skills, particularly when documenting technical findings and communicating security risks or recommendations to stakeholders. - A collaborative mindset is important, along with the ability to work independently and maintain deep technical focus when conducting complex investigations. ### Benefits - **$100,000–$110,000 annual salary**. - **401(k) retirement plan** with an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed. - **Medical, dental, and vision insurance**, available on the first day of the month following the employee's first day of employment. - **Group term life insurance**, short-term disability, and long-term disability coverage. - Access to voluntary benefits including **life insurance, hospital indemnity, accident, and critical illness coverage**. - Participation in a **Discretionary Time Off (DTO) program** to support flexibility and work-life balance. - **11 paid holidays annually**. - The opportunity to work within a technically advanced security operations environment focused on real-time threat detection, investigation, response, and cyber resilience. - Exposure to modern security technologies and methodologies across **SIEM, EDR, SOAR, cloud security, threat intelligence, detection engineering, and incident response**. - Opportunities to mentor other analysts, develop operational expertise, and contribute to continuous improvements in security detection and response capabilities.