Senior Security Operations Analyst
Core
Senior Security Operations Analyst specializing in detection engineering, threat hunting, and Level 3 incident response within a Security Operations Centre.
Role type
Senior Security Operations Analyst (Detection Engineering & Incident Response)
Builds
Detection content (rules, queries, playbooks) for SIEM/XDR platforms; automation for triage and response.
Domain
Cyber Security / SOC Operations / Threat Intelligence
Deliverable
production ML models | product features | dashboards & analysis | client delivery
Required skills
Detection engineering lifecycle management, SIEM/XDR platform expertise, advanced query languages (KQL, SPL), MITRE ATT&CK framework application, complex incident analysis, threat hunting, data telemetry assessment, security operations leadership
Preferred skills
Detection-as-code practices, scripting/automation (Python, PowerShell), adversary emulation/purple team testing, managed security services experience, industry certifications (SC-200, CISSP, GCFA, etc.)
Technologies
Microsoft Sentinel, Microsoft Defender XDR, SIEM, XDR, SOAR, MITRE ATT&CK
Responsibilities
Own end-to-end detection lifecycle (intake to retirement); develop and optimize detection rules and queries; act as Level 3 escalation point for high-severity incidents; conduct threat hunts and translate findings into detections; mentor analysts and improve SOC playbooks.
Seniority
Senior, hands-on IC with leadership responsibilities